Re: CVE-2026-43503: net: skbuff: preserve shared-frag marker during coalescing

Re: CVE-2026-43503: net: skbuff: preserve shared-frag marker during coalescing

[Alexey Khoroshilov]

On 23.05.2026 14:44, Greg Kroah-Hartman wrote:
> From: Greg Kroah-Hartman <gregkh@kernel.org>
> 
> Description
> ===========
> 
> In the Linux kernel, the following vulnerability has been resolved:
> 
> net: skbuff: preserve shared-frag marker during coalescing

CVE with this title is published at
https://www.cve.org/CVERecord/?id=CVE-2026-46300

> 
> Unaffected versions might change over time as fixes are backported to
> older supported kernel versions.  The official CVE entry at
> 	https://cve.org/CVERecord/?id=CVE-2026-43503
> will be updated if fixes are backported, please check that for the most
> up to date information about this issue.

By the link at CVE-2026-43503 we see

Updated: 2026-05-30
Published: 2026-05-23

Title: net: skbuff: propagate shared-frag marker through frag-transfer
helpers


Looks like a bit of a mix-up. What is a correct mapping?

--
Alexey

Re: CVE-2026-43503: net: skbuff: preserve shared-frag marker during coalescing

[Greg Kroah-Hartman]

On Mon, Jun 01, 2026 at 01:08:34PM +0300, Alexey Khoroshilov wrote:
> On 23.05.2026 14:44, Greg Kroah-Hartman wrote:
> > From: Greg Kroah-Hartman <gregkh@kernel.org>
> > 
> > Description
> > ===========
> > 
> > In the Linux kernel, the following vulnerability has been resolved:
> > 
> > net: skbuff: preserve shared-frag marker during coalescing
> 
> CVE with this title is published at
> https://www.cve.org/CVERecord/?id=CVE-2026-46300
> 
> > 
> > Unaffected versions might change over time as fixes are backported to
> > older supported kernel versions.  The official CVE entry at
> > 	https://cve.org/CVERecord/?id=CVE-2026-43503
> > will be updated if fixes are backported, please check that for the most
> > up to date information about this issue.
> 
> By the link at CVE-2026-43503 we see
> 
> Updated: 2026-05-30
> Published: 2026-05-23
> 
> Title: net: skbuff: propagate shared-frag marker through frag-transfer
> helpers
> 
> 
> Looks like a bit of a mix-up. What is a correct mapping?

The correct mapping should be what is on cve.org.  If it is incorrect,
please let us know.  See the cve.org git repo for the changes that were
made here, or the vulns.git repo for the explaination of what happened
if you want more details.

thanks,

greg k-h