Re: [PATCH 1/6] xfrm: iptfs: preserve shared-frag marker in iptfs_consume_frags()

[patchwork-bot+netdevbpf@kernel.org]

Hello:

This series was applied to netdev/net.git (main)
by Steffen Klassert <steffen.klassert@secunet.com>:

On Wed, 10 Jun 2026 16:07:40 +0200 you wrote:
> From: Takao Sato <takaosato1997@gmail.com>
> 
> iptfs_consume_frags() transfers paged fragments from one socket buffer
> to another but fails to propagate the SKBFL_SHARED_FRAG flag. This is
> the same class of bug that was fixed in skb_try_coalesce() for
> CVE-2026-46300: when fragments backed by read-only page-cache pages are
> merged, the marker indicating their shared nature must be preserved so
> that ESP can decide correctly whether in-place encryption is safe.
> 
> [...]

Here is the summary with links:
  - [1/6] xfrm: iptfs: preserve shared-frag marker in iptfs_consume_frags()
    https://git.kernel.org/netdev/net/c/e9096a5a170e
  - [2/6] xfrm: iptfs: fix use-after-free on first_skb in __input_process_payload
    https://git.kernel.org/netdev/net/c/eb48730bb827
  - [3/6] xfrm: policy: fix use-after-free on inexact bin in xfrm_policy_bysel_ctx()
    https://git.kernel.org/netdev/net/c/7f2d76c9c032
  - [4/6] xfrm: iptfs: fix ABBA deadlock in iptfs_destroy_state()
    https://git.kernel.org/netdev/net/c/c8a8a75b7334
  - [5/6] xfrm: espintcp: do not reuse an in-progress partial send
    https://git.kernel.org/netdev/net/c/c381039ade2e
  - [6/6] esp: fix page frag reference leak on skb_to_sgvec failure
    https://git.kernel.org/netdev/net/c/26aad08a9289

You are awesome, thank you!
-- 
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html