Subject: Re: [PATCH net v3] rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present

From: Hyunwoo Kim <[email-masked]>
Date: Mon, 11 May 2026 02:05:19 +0900

On Sun, May 10, 2026 at 10:03:10AM -0700, Jakub Kicinski wrote:
> On Mon, 11 May 2026 01:48:39 +0900 Hyunwoo Kim wrote:
> > On Sun, May 10, 2026 at 08:45:20AM -0700, Jakub Kicinski wrote:
> > > On Fri, 8 May 2026 17:53:09 +0900 Hyunwoo Kim wrote:  
> > > >  			    sp->hdr.securityIndex != 0 &&
> > > > -			    skb_cloned(skb)) {
> > > > +			    (skb_cloned(skb) ||
> > > > +			     skb_has_frag_list(skb) ||
> > > > +			     skb_has_shared_frag(skb))) {  
> > > 
> > > We seem to be getting a lot of fixes for this issue, and this one is
> > > incorrect :| Writing to _any_ frags is incorrect. You have to copy
> > > if skb is not linear. skb_ensure_writable()  
> > 
> > I was testing a patch based on skb_ensure_writable() but it seems v3
> > has just been merged to mainline...
> > 
> > What would be the best way to proceed?
> 
> Depends on the tree. Where was it merged?

That's the torvalds tree:

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=aa54b1d27fe0c2b78e664a34fd0fdf7cd1960d71