Subject: Re: [PATCH net v3] rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present

From: Jakub Kicinski <[email-masked]>
Date: Sun, 10 May 2026 08:45:20 -0700

On Fri, 8 May 2026 17:53:09 +0900 Hyunwoo Kim wrote:
>  			    sp->hdr.securityIndex != 0 &&
> -			    skb_cloned(skb)) {
> +			    (skb_cloned(skb) ||
> +			     skb_has_frag_list(skb) ||
> +			     skb_has_shared_frag(skb))) {

We seem to be getting a lot of fixes for this issue, and this one is
incorrect :| Writing to _any_ frags is incorrect. You have to copy
if skb is not linear. skb_ensure_writable()