Commit 1f042e426be0 for kernel

commit 1f042e426be08a1da57fa7841fd13eb6764f8f60
Merge: e48e8edbef2e 3834e079d67f
Author: Jakub Kicinski <kuba@kernel.org>
Date:   Thu Aug 6 09:01:56 2026 -0700

    Merge branch 'tls-fix-plaintext-sk_msg-ring-over-fill'

    chanyoung says:

    ====================
    tls: fix plaintext sk_msg ring over-fill

    An unprivileged user can oops the kernel by splicing into a kTLS socket
    whose open record already has a full plaintext sk_msg ring.  Reproduced on
    net (53658c6f3682) with a stock config, no KASAN.

    Patch 2 oopses an unpatched kernel and passes with patch 1 applied.
    ====================

    Link: https://patch.msgid.link/20260804052837.49015-1-ppoo1220@gmail.com
    Signed-off-by: Jakub Kicinski <kuba@kernel.org>