net: mctp: mctp_fraq_queue should take ownership of passed skb
authorJeremy Kerr <jk@codeconstruct.com.au>
Fri, 29 Aug 2025 07:28:26 +0000 (15:28 +0800)
committerPaolo Abeni <pabeni@redhat.com>
Tue, 2 Sep 2025 12:45:51 +0000 (14:45 +0200)
commit773b27a8a2f00ce3134e92e50ea4794a98ba2b76
tree4ddf11a23fb1e2bc92de2ce7b2090461364a8b01
parentba1e9421cf1a8369d25c3832439702a015d6b5f9
net: mctp: mctp_fraq_queue should take ownership of passed skb

As of commit f5d83cf0eeb9 ("net: mctp: unshare packets when
reassembling"), we skb_unshare() in mctp_frag_queue(). The unshare may
invalidate the original skb pointer, so we need to treat the skb as
entirely owned by the fraq queue, even on failure.

Fixes: f5d83cf0eeb9 ("net: mctp: unshare packets when reassembling")
Signed-off-by: Jeremy Kerr <jk@codeconstruct.com.au>
Link: https://patch.msgid.link/20250829-mctp-skb-unshare-v1-1-1c28fe10235a@codeconstruct.com.au
Signed-off-by: Paolo Abeni <pabeni@redhat.com>
net/mctp/route.c