On Fri, May 15, 2026 at 02:55:35PM +0900, Hyunwoo Kim wrote:
> Changes in v4:
> - Include the tcp_clone_payload() propagation suggested by Sabrina.
> - Drop the skb_try_coalesce() change; addressed by commit f84eca581739.
> - v3: https://lore.kernel.org/all/agW4vC0r8QOUKtRT@v4bel/
> 
> Changes in v3:
> - Include the skb_gro_receive() audit patch suggested by Sultan
> - v2: https://lore.kernel.org/all/agToIEDI4TaTNLRb@v4bel/
> 
> Changes in v2:
> - Also propagate SHARED_FRAG in skb_try_coalesce() and skb_shift()
> - v1: https://lore.kernel.org/all/agRfuVOeMI5pbHhY@v4bel/

Hi Hyunwoo,

Per your ask to me to use AI for exploring relevant paths [1], I've attached my
findings from a pretty thorough day of hunting for these with Claude.

None of the findings appear to be currently exploitable.

Please let me know if you have any questions, and I hope you find this helpful.

[1] https://lore.kernel.org/all/agWUdie1xBvBu22I@v4bel/

Thanks,
Sultan