1 files changed, 9 insertions, 2 deletions

diff --git a/net/ipv4/tcp_ipv4.c b/net/ipv4/tcp_ipv4.c
index 277d71239d75..3979939804b7 100644
--- a/net/ipv4/tcp_ipv4.c
+++ b/net/ipv4/tcp_ipv4.c
@@ -1774,6 +1774,7 @@ static void tcp_v4_fill_cb(struct sk_buff *skb, const struct iphdr *iph,
 int tcp_v4_rcv(struct sk_buff *skb)
 {
         struct net *net = dev_net(skb->dev);
+        struct sk_buff *skb_to_free;
         int sdif = inet_sdif(skb);
         const struct iphdr *iph;
         const struct tcphdr *th;
@@ -1905,11 +1906,17 @@ process:
         tcp_segs_in(tcp_sk(sk), skb);
         ret = 0;
         if (!sock_owned_by_user(sk)) {
+                skb_to_free = sk->sk_rx_skb_cache;
+                sk->sk_rx_skb_cache = NULL;
                 ret = tcp_v4_do_rcv(sk, skb);
-        } else if (tcp_add_backlog(sk, skb)) {
-                goto discard_and_relse;
+        } else {
+                if (tcp_add_backlog(sk, skb))
+                        goto discard_and_relse;
+                skb_to_free = NULL;
         }
         bh_unlock_sock(sk);
+        if (skb_to_free)
+                __kfree_skb(skb_to_free);
 
 put_and_return:
         if (refcounted)