Subject: Re: net: ipv6: raw: fixes null pointer deference in rawv6_push_pending_frames

From: Jakub Kicinski <[email-masked]>
Date: Fri, 6 Jan 2023 14:55:53 -0800

On Fri, 6 Jan 2023 14:19:52 -0700 Kyle Zeng wrote:
> It is posible that the skb_queue_walkloop does not assign csum_skb to a real skb.

Not immediately obvious to me how that could happen given prior checks
in this function.