[PATCH bpf v5 0/3] bpf: Fix use-after-free of progs detached from busy trampolines

patchwork-bot+netdevbpf at kernel.org patchwork-bot+netdevbpf at kernel.org
Mon Sep 28 23:20:28 PDT 2026


Hello:

This series was applied to bpf/bpf.git (master)
by Alexei Starovoitov <ast at kernel.org>:

On Sat, 26 Sep 2026 13:55:57 +0000 you wrote:
> A task running in a trampoline image can call a prog that was detached
> and freed in the meantime, when it slept in a sleepable prog before
> reaching the detached one or was preempted right before calling it.
> Patch 1 handles the preempted case with an RCU tasks grace period,
> patch 2 handles the sleeping case by patching detached progs out of the
> images that still call them and patch 3 adds a selftest for the sleeping
> case.
> 
> [...]

Here is the summary with links:
  - [bpf,v5,1/3] bpf: Wait for an RCU tasks grace period before freeing trampoline progs
    https://git.kernel.org/bpf/bpf/c/0fb5751a6e41
  - [bpf,v5,2/3] bpf: Skip detached progs in trampoline images that are still in use
    https://git.kernel.org/bpf/bpf/c/17637e1a581a
  - [bpf,v5,3/3] selftests/bpf: Detach a trampoline prog while a task sleeps before it
    https://git.kernel.org/bpf/bpf/c/d5288c519bbd

You are awesome, thank you!
-- 
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html





More information about the linux-riscv mailing list