)]}'
{
  "commit": "e9096a5a170e7ecd6467bc2e08668ec39897cda7",
  "tree": "78fc97bd60cde60aa39c6707055dc1aa6af75dd0",
  "parents": [
    "78ef59e7a6459b16f8102e0ee1c718443323d1af"
  ],
  "author": {
    "name": "Takao Sato",
    "email": "takaosato1997@gmail.com",
    "time": "Tue May 26 13:09:57 2026 -0300"
  },
  "committer": {
    "name": "Steffen Klassert",
    "email": "steffen.klassert@secunet.com",
    "time": "Mon Jun 01 08:38:51 2026 +0200"
  },
  "message": "xfrm: iptfs: preserve shared-frag marker in iptfs_consume_frags()\n\niptfs_consume_frags() transfers paged fragments from one socket buffer\nto another but fails to propagate the SKBFL_SHARED_FRAG flag. This is\nthe same class of bug that was fixed in skb_try_coalesce() for\nCVE-2026-46300: when fragments backed by read-only page-cache pages are\nmerged, the marker indicating their shared nature must be preserved so\nthat ESP can decide correctly whether in-place encryption is safe.\n\nApply the same two-line fix used in skb_try_coalesce() to\niptfs_consume_frags().\n\nFixes: b96ba312e21c (\"xfrm: iptfs: share page fragments of inner packets\")\nCc: stable@vger.kernel.org # 6.14+\nSigned-off-by: Takao Sato \u003ctakaosato1997@gmail.com\u003e\nSigned-off-by: Steffen Klassert \u003csteffen.klassert@secunet.com\u003e\n",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "6c6bbc0405170c9f19ff4771bf5bf19e46d1b2ea",
      "old_mode": 33188,
      "old_path": "net/xfrm/xfrm_iptfs.c",
      "new_id": "62ba828632f19a73f66a4b3366c557509be185d8",
      "new_mode": 33188,
      "new_path": "net/xfrm/xfrm_iptfs.c"
    }
  ]
}