[SRU][N][PATCH 0/6] CVE-2026-43500

[Massimiliano Pellizzer]

https://ubuntu.com/security/CVE-2026-43500

David Howells (4):
  rxrpc: Fix conn-level packet handling to unshare RESPONSE packets
  rxrpc: Parse received packets before dealing with timeouts
  rxrpc: Fix potential UAF after skb_unshare() failure
  rxrpc: Fix rxrpc_input_call_event() to only unshare DATA packets

Hyunwoo Kim (1):
  rxrpc: Also unshare DATA/RESPONSE packets when paged frags are present

Wang Jie (1):
  rxrpc: only handle RESPONSE during service challenge

 include/trace/events/rxrpc.h |  5 ++--
 net/rxrpc/ar-internal.h      |  1 -
 net/rxrpc/call_event.c       | 29 +++++++++++++++++++++---
 net/rxrpc/conn_event.c       | 44 +++++++++++++++++++++++++++++++++---
 net/rxrpc/io_thread.c        | 24 ++------------------
 net/rxrpc/skbuff.c           |  9 --------
 6 files changed, 72 insertions(+), 40 deletions(-)

-- 
2.53.0