Re: [PATCH v4 net] sctp: auth: verify auth requirement when auth_chunk is NULL

[email protected] Wed, 22 Jul 2026 21:00:08 +0000

Newsgroups	org.kernel.vger.linux-sctp,org.kernel.vger.linux-kernel,org.kernel.vger.netdev
Message-ID	<178475400889.2022998.5643327282281908086.git-patchwork-notify@kernel.org>

Hello:

This patch was applied to netdev/net.git (main)
by Jakub Kicinski <[email protected]>:

On Tue, 21 Jul 2026 09:55:32 +0800 you wrote:
> From: Qing Luo <[email protected]>
> 
> sctp_auth_chunk_verify() returns true unconditionally when
> chunk->auth_chunk is NULL, silently skipping authentication.
> This is incorrect when:
> 
> 1. skb_clone() failed in the BH receive path, leaving auth_chunk
>    NULL. In sctp_endpoint_bh_rcv() asoc is NULL for new
>    connections, so the early sctp_auth_recv_cid() check cannot
>    catch this.
> 
> [...]

Here is the summary with links:
  - [v4,net] sctp: auth: verify auth requirement when auth_chunk is NULL
    https://git.kernel.org/netdev/net/c/8e04823c120b

You are awesome, thank you!
-- 
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html