Re: [PATCH 2/2] sctp: auth: Fix safety issue when skb_clone fails in auth_chunk handling

Jakub Kicinski <[email protected]> Wed, 22 Jul 2026 11:38:42 -0700

Newsgroups	org.kernel.vger.linux-sctp,org.kernel.vger.linux-kernel,org.kernel.vger.netdev
Message-ID	<[email protected]>

On Thu, 16 Jul 2026 14:52:59 +0800 luoqing wrote:
> When processing AUTH + COOKIE-ECHO packets, if skb_clone fails due to
> memory pressure, chunk->auth_chunk is set to NULL but chunk->auth is
> still set to 1. This causes sctp_auth_chunk_verify to skip the AUTH
> validation (since auth_chunk is NULL), allowing unauthenticated
> COOKIE-ECHO packets to be accepted.

Fixes need Fixes tags; do not send patches in replies to existing
threads.