From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mta1.formilux.org (mta1.formilux.org [51.159.59.229]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id AE3CF39EF30 for ; Sun, 10 May 2026 16:48:51 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=51.159.59.229 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1778431734; cv=none; b=VzeFBNCPX8xWOKurH8h2SKEYs+KjhibqcPaudqlfe/PRH6ez6fEndoS9bRy8rB+FnB6fSnoYMUoQXE7+hrzsHWyWP+MJjYpXe8dKGvvbOw+1DBGalGeiETLZcshkhoxOnpDlKlHPa1HgFuf5MfkC6bW3eXa/p8c+6v7RLdmIANI= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1778431734; c=relaxed/simple; bh=osT9SwSZdN0AMGl6iRgPie65PwN6jpGsuEu89ABLp30=; h=Date:From:To:Cc:Subject:Message-ID:References:MIME-Version: Content-Type:Content-Disposition:In-Reply-To; b=iZ3zDk8hgqFry4AMSYQAfHeDRhPOLh1EZ/P8hBjuX+RYxfhqv+BIBX2kPJuf9c3Jv9lxvw0XIfCXfTCfrbQaphPNGJjNWzGMbyYiJ/sH/YpPVb36A1G7yqoeFeav2IdY6NQPbQcEE0wowFR0IZYyXK4vNvviTwi1P6zXysPr1xM= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=1wt.eu; spf=pass smtp.mailfrom=1wt.eu; dkim=pass (1024-bit key) header.d=1wt.eu header.i=@1wt.eu header.b=YeKUlf5l; arc=none smtp.client-ip=51.159.59.229 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=1wt.eu Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=1wt.eu Authentication-Results: smtp.subspace.kernel.org; dkim=pass (1024-bit key) header.d=1wt.eu header.i=@1wt.eu header.b="YeKUlf5l" DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1wt.eu; s=mail; t=1778431724; bh=apnsuoZiJkaNfwbRZELwDGVTJwBEL4h0T8565lIB10M=; h=From:Message-ID:From; b=YeKUlf5l+yvnjO8Ix1Us5bDMQ6ry0ETmI+r03P0gquvZk02hbs6idndeNWdtmzEPz uWWBiJP7CL9Bk8rFw5NZLwjiftaGm5zm3GIogbFtw1n1SodBIHPitP6cdXQiy8FuQo U1qjCA5SE9ix31WzjEkaOtG5/Dimw5gEZyzjgUoY= Received: from 1wt.eu (ded1.1wt.eu [163.172.96.212]) by mta1.formilux.org (Postfix) with ESMTP id F3F8AC0A98; Sun, 10 May 2026 18:48:43 +0200 (CEST) Date: Sun, 10 May 2026 18:48:43 +0200 From: Willy Tarreau To: Linus Torvalds , yuri08 Cc: linux-kernel@vger.kernel.org, security@kernel.org, davem@davemloft.net Subject: Re: [SECURITY] Bypass of Page Cache Protection in IPsec ESP TX Path via Incorrect skb_cow_data() Semantic Message-ID: References: Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: On Sun, May 10, 2026 at 09:18:12AM -0700, Linus Torvalds wrote: > On Sun, 10 May 2026 at 08:22, yuri08 wrote: > > > > In net/core/skbuff.c (Function __skb_cow_data): The core issue lies here: > > Is this all just AI hallucination? There is no such function with > double underscores, and the other "quoted" code seems to also be of > the kind "almost, but not actually match reality". Pretty disturbing indeed! It looks like a context with too strong quantization where "tailbits" became "tailroom" and some other parts were poorly remmebered when dumped. @yuri08 please revisit entirely your report to fix it or trash it if not valid. Please don't send unvalidated crap out of AI tools, it's just wasting precious maintainers' time that would be better spent doing something useful. Please also recheck everything you may have previously shared, and retract your claims if you spot anything dubious. I'm seeing at least one patch about UAF on algif_aead shared with maintainers and LKML, that we don't know anymore if we should trust it or not. thanks, Willy