| Published | Title | Version | Author | Status |
|---|---|---|---|---|
| 2026-11-03 03:26 UTC | Fix OOB read in BTF dumper zero-scan | 3 | gubin@cmss.chinamobile.com | - |
| 2026-11-02 19:03 UTC | bpf: Fix stack argument precision propagation | 2 | xyx2021@mail.ustc.edu.cn | - |
| 2026-11-02 17:09 UTC | bpf: Fix the stack buffer that bpf_dynptr_slice_rdwr() returns | 2 | alexei.starovoitov@gmail.com | in progress |
| 2026-11-02 07:20 UTC | bpf, sockmap: Fixes for verdicts, redirects, corks and recvmsg() | 2 | alexei.starovoitov@gmail.com | finished in 4h23m0s |
| 2026-11-02 06:49 UTC | ipv6: Check the Home Address option again before its address is used | 1 | alexei.starovoitov@gmail.com | finished in 3h51m0s |
| 2026-11-02 06:42 UTC | bpf: Follow-ups for the arena mmap() fixes | 1 | alexei.starovoitov@gmail.com | finished in 3h50m0s |
| 2026-11-02 05:59 UTC | bpf: Fix two holes in the analysis of stack arguments | 2 | alexei.starovoitov@gmail.com | finished in 4h24m0s |
| 2026-11-02 05:55 UTC | bpf: Fix the stack buffer that bpf_dynptr_slice_rdwr() returns | 1 | alexei.starovoitov@gmail.com | finished in 4h22m0s |
| 2026-11-02 01:29 UTC | bpf: Replace bpf_patch_insn_data() with a list of deferred patches | 3 | alexei.starovoitov@gmail.com | finished in 4h17m0s |
| 2026-11-01 19:44 UTC | net: reject a negative TCP header offset in qdisc_pkt_len_segs_init() | 1 | alexei.starovoitov@gmail.com | finished in 4h2m0s |
| 2026-11-01 19:20 UTC | bpf, sockmap: Fixes for verdicts, redirects, corks and recvmsg() | 1 | alexei.starovoitov@gmail.com | finished in 4h2m0s |
| 2026-11-01 19:05 UTC | bpf: Fixes for the verifier, arena, skb and lwt helpers | 1 | alexei.starovoitov@gmail.com | finished in 4h4m0s |
| 2026-11-01 17:46 UTC | bpf: A lookup in an array is not NULL when the largest key is below max_entries | 1 | alexei.starovoitov@gmail.com | finished in 3h51m0s |
| 2026-11-01 17:44 UTC | bpf: The register of an implicit kfunc argument is not live | 1 | alexei.starovoitov@gmail.com | finished in 3h55m0s |
| 2026-11-01 03:04 UTC | bpf: A stack in arena | 2 | alexei.starovoitov@gmail.com | skipped |
| 2026-11-01 00:46 UTC | bpf: Don't trust pointers spilled in slots that a callee can write | 1 | alexei.starovoitov@gmail.com | finished in 3h52m0s |
| 2026-10-31 22:06 UTC | bpf: Fix the join of fp+0 in the analysis of stack arguments | 1 | alexei.starovoitov@gmail.com | finished in 4h24m0s |
| 2026-10-31 21:55 UTC | bpf: One may_goto time slice per prog invocation | 2 | alexei.starovoitov@gmail.com | finished in 4h48m0s |
| 2026-10-31 05:05 UTC | bpf, x86: Fix bpf_throw() in a prog with a private stack | 1 | alexei.starovoitov@gmail.com | finished in 3h59m0s |
| 2026-10-30 21:09 UTC | bpf: Keep the valid bytes of a packet pointer in scalar evolution | 2 | alexei.starovoitov@gmail.com | finished in 4h12m0s |
| 2026-10-28 14:35 UTC | blk-iocost: BPF struct_ops cost model | 11 | cui.tao@linux.dev | finished in 4h17m0s |
| 2026-10-27 20:14 UTC | bpf: Keep the valid bytes of a packet pointer in scalar evolution | 1 | alexei.starovoitov@gmail.com | finished in 4h16m0s |
| 2026-10-27 19:02 UTC | bpf: Remove BPF_F_ARENA_SCALAR, fix scalar evolution and scalar forks | 2 | alexei.starovoitov@gmail.com | finished in 4h9m0s |
| 2026-10-27 04:58 UTC | tcp_bpf: update copied_seq from current value | 2 | zhilinz@nebusec.ai | finished in 4h31m0s |
| 2026-10-26 02:58 UTC | bpf: Stack in arena and a verifier that joins states | 1 | alexei.starovoitov@gmail.com |
finished
in 1h19m0s
[1 findings] |
| 2026-10-26 01:52 UTC | bpf: Validate stack arg reads against caller state | 3 | bestswngs@gmail.com | finished in 4h19m0s |
| 2026-10-24 03:10 UTC | bpf: Don't hold pack_mutex over arm64 IPIs | 1 | alexei.starovoitov@gmail.com | skipped |
| 2026-10-23 15:03 UTC | bpf: Don't re-sort subprog_info[] for every new subprogram | 1 | alexei.starovoitov@gmail.com | finished in 3h58m0s |
| 2026-10-22 01:57 UTC | uprobes: Don't stall fork() when mmap_lock is busy | 1 | alexei.starovoitov@gmail.com | finished in 4h12m0s |
| 2026-10-22 00:07 UTC | Add diagnostics for kfunc registration failures and jit subtest skips | 1 | szwyb123@gmail.com | skipped |
| 2026-10-21 22:08 UTC | bpf, x86: Use emit_rsb_call() to call bpf_unwind_target() | 1 | alexei.starovoitov@gmail.com | finished in 4h8m0s |
| 2026-10-21 08:00 UTC | bpf: Validate stack arg reads against caller state | 2 | bestswngs@gmail.com | finished in 4h29m0s |
| 2026-10-20 23:19 UTC | bpf: Fixes for unwind_goto and unwind_exit | 1 | alexei.starovoitov@gmail.com | finished in 3h58m0s |
| 2026-10-20 18:13 UTC | bpf: Unwinding with unwind_goto and unwind_exit | 4 | alexei.starovoitov@gmail.com | finished in 3h48m0s |
| 2026-10-20 04:33 UTC | bpf: Unwinding with unwind_goto and unwind_exit | 3 | alexei.starovoitov@gmail.com | finished in 4h7m0s |
| 2026-10-19 05:18 UTC | bpf: Unwinding with unwind_goto and unwind_exit | 2 | alexei.starovoitov@gmail.com | skipped |
| 2026-10-19 01:13 UTC | bpf: Refuse the prologue for an extension if callers keep packet pointers | 2 | alexei.starovoitov@gmail.com | finished in 3h49m0s |
| 2026-10-18 01:27 UTC | bpf: Refuse the prologue for an extension if callers keep packet pointers | 1 | alexei.starovoitov@gmail.com | skipped |
| 2026-10-18 01:02 UTC | bpf: Unwinding via r3 | 1 | alexei.starovoitov@gmail.com | finished in 4h9m0s |
| 2026-10-17 23:09 UTC | bpf: Memory safety, lifetime and locking fixes (followups) | 3 | alexei.starovoitov@gmail.com | skipped |
| 2026-10-17 16:37 UTC | bpf: Memory safety, lifetime and locking fixes | 2 | alexei.starovoitov@gmail.com | finished in 4h5m0s |
| 2026-10-17 01:39 UTC | net: free the policies if a socket's clone fails late | 1 | alexei.starovoitov@gmail.com | finished in 4h20m0s |
| 2026-10-17 01:20 UTC | bpf: Memory safety, lifetime and locking fixes | 1 | alexei.starovoitov@gmail.com | finished in 4h0m0s |
| 2026-10-16 19:16 UTC | bpf: Don't echo user-supplied map info fields back to userspace | 2 | daniel@iogearbox.net | finished in 4h21m0s |
| 2026-10-16 16:41 UTC | bpf: Don't echo user-supplied map info fields back to userspace | 1 | daniel@iogearbox.net | finished in 3h58m0s |
| 2026-10-16 15:55 UTC | bpf: Free the subprog jump tables once the CFG passes are done | 1 | daniel@iogearbox.net | finished in 4h11m0s |
| 2026-10-16 10:18 UTC | bpf, s390: Mask the count of 32-bit shifts by register | 2 | daniel@iogearbox.net | skipped |
| 2026-10-13 17:12 UTC | bpf: Various x86-64 BPF JIT improvements | 1 | daniel@iogearbox.net | finished in 4h10m0s |
| 2026-10-11 16:48 UTC | bpf: Reject BTF ids with the same address in tracing_multi link | 1 | alexei.starovoitov@gmail.com | finished in 4h29m0s |
| 2026-10-09 02:24 UTC | bpf: Claim the per-CPU send_signal irq_work before filling it | 2 | chenyuan@kylinos.cn | finished in 4h15m0s |
| 2026-10-03 20:33 UTC | selftests/bpf: Format data_in_arena_rust.rs with rustfmt | 1 | alexei.starovoitov@gmail.com | skipped |
| 2026-10-03 15:04 UTC | selftests/bpf: Fix data_in_arena test with GCC | 1 | alexei.starovoitov@gmail.com | skipped |
| 2026-10-03 12:40 UTC | blk-iocost: add BPF struct_ops cost model support | 10 | cui.tao@linux.dev | finished in 4h19m0s |
| 2026-10-03 01:30 UTC | blk-iocost: add BPF struct_ops cost model support | 9 | cui.tao@linux.dev | finished in 3h56m0s |
| 2026-10-02 12:47 UTC | bpf: Support programs compiled by rust-bpf | 2 | alexei.starovoitov@gmail.com | finished in 3h58m0s |
| 2026-10-01 15:20 UTC | rv: Add support for BPF monitors | 2 | gmonaco@redhat.com | skipped |
| 2026-10-01 14:52 UTC | bpf: Fix packet range of pointers sharing an id | 1 | alexei.starovoitov@gmail.com | finished in 4h8m0s |
| 2026-09-30 19:31 UTC | bpf: Support programs compiled by rust-bpf | 1 | alexei.starovoitov@gmail.com | finished in 3h59m0s |
| 2026-09-30 09:59 UTC | bpf: Fix objects stuck in free_by_rcu_ttrace | 1 | alexei.starovoitov@gmail.com | finished in 4h15m0s |
| 2026-09-30 07:51 UTC | blk-iocost: add BPF struct_ops cost model support | 8 | cui.tao@linux.dev | finished in 4h1m0s |
| 2026-09-28 18:53 UTC | Unify subprog argument checks | 3 | ameryhung@gmail.com | finished in 3h58m0s |
| 2026-09-28 18:14 UTC | Unify subprog argument checks | 2 | ameryhung@gmail.com | finished in 4h5m0s |
| 2026-09-26 11:38 UTC | selftests/bpf: Fix gcc -Wreturn-type error in the tail call subprog test | 1 | daniel@iogearbox.net | skipped |
| 2026-09-25 21:12 UTC | Unify subprog argument checks | 1 | ameryhung@gmail.com | finished in 4h5m0s |
| 2026-09-25 17:52 UTC | Misc BPF gotox fixes | 3 | daniel@iogearbox.net | finished in 4h20m0s |
| 2026-09-24 23:31 UTC | bpf: Fixes for may_goto, insn patching and iterator loops | 1 | alexei.starovoitov@gmail.com | finished in 3h49m0s |
| 2026-09-24 18:25 UTC | selftests/bpf: Run callx prog_tests once | 1 | alexei.starovoitov@gmail.com | skipped |
| 2026-09-24 18:23 UTC | bpf: Fix overflow of jump offset in constant blinding | 1 | alexei.starovoitov@gmail.com | finished in 3h49m0s |
| 2026-09-24 18:21 UTC | selftests/bpf: Fix build of callx tests with GCC | 1 | alexei.starovoitov@gmail.com | skipped |
| 2026-09-24 05:45 UTC | blk-iocost: BPF struct_ops cost model | 7 | cui.tao@linux.dev | finished in 4h15m0s |
| 2026-09-24 03:10 UTC | bpf: Indirect calls of bpf subprogs (callx) | 2 | alexei.starovoitov@gmail.com | finished in 3h50m0s |
| 2026-09-24 02:37 UTC | bpf: Keep target extended until its last freplace link detaches | 2 | chenyuan_fl@163.com | finished in 4h23m0s |
| 2026-09-23 22:35 UTC | bpf: Verify loops without walking every iteration | 1 | alexei.starovoitov@gmail.com | finished in 4h4m0s |
| 2026-09-23 09:06 UTC | bpf: Keep target extended until its last freplace link detaches | 1 | chenyuan_fl@163.com | finished in 4h42m0s |
| 2026-09-23 08:58 UTC | bpf, arena: fix range_tree consistency on allocation failure | 7 | chenyuan_fl@163.com | finished in 2h56m0s |
| 2026-09-22 01:13 UTC | bpf: Indirect calls of bpf subprogs (callx) | 1 | alexei.starovoitov@gmail.com | finished in 3h52m0s |
| 2026-09-21 17:39 UTC | bpf: clear stale IPv4 options after LWT encapsulation | 4 | bestswngs@gmail.com | finished in 4h37m0s |
| 2026-09-17 20:05 UTC | bpf: A common way to attach struct_ops to a cgroup | 4 | ameryhung@gmail.com | finished in 4h12m0s |
| 2026-09-17 04:17 UTC | bpf: Add UHMUL and SHMUL instructions | 1 | tangyazhou@zju.edu.cn | finished in 4h7m0s |
| 2026-09-16 23:24 UTC | selftests/bpf: Wait for links to come up in lwt_ip_encap | 1 | alexei.starovoitov@gmail.com | skipped |
| 2026-09-15 15:07 UTC | BPF LSM xattrs at inode creation support | 1 | daniel@iogearbox.net | finished in 4h4m0s |
| 2026-09-11 22:03 UTC | Unify helper and kfunc argument checks | 2 | ameryhung@gmail.com | finished in 26m0s |
| 2026-09-09 04:08 UTC | bpf: disallow bpf_skb_pull_data() for LWT_SEG6LOCAL | 2 | bestswngs@gmail.com | finished in 4h13m0s |
| 2026-09-08 16:49 UTC | libbpf: Fix array comparison in BTF dedup | 2 | caomingpei@gmail.com | skipped |
| 2026-09-07 13:10 UTC | libbpf: Fix array comparison in BTF dedup | 1 | caomingpei@gmail.com | skipped |
| 2026-09-05 22:00 UTC | bpf: Unify helper and kfunc argument checks | 1 | ameryhung@gmail.com | finished in 1h10m0s |
| 2026-09-02 09:37 UTC | bpf, arena: fix range_tree consistency on allocation failure | 5 | chenyuan_fl@163.com | finished in 4h0m0s |
| 2026-09-02 07:05 UTC | bpf: Add UHMUL and SHMUL instructions | 1 | tangyazhou@zju.edu.cn | finished in 4h6m0s |
| 2026-08-01 07:46 UTC | Generate bpf_func_proto for kfunc | 3 | ameryhung@gmail.com | finished in 4h21m0s |
| 2026-07-24 19:07 UTC | Generate bpf_func_proto for kfunc | 2 | ameryhung@gmail.com | finished in 5h17m0s |
| 2026-07-23 22:18 UTC | bpf: Reject passing scalar NULL to nonnull arg of a global subprog | 2 | ameryhung@gmail.com | finished in 5h13m0s |
| 2026-07-23 20:24 UTC | bpf: Reject passing scalar NULL to nonnull arg of a global subprog | 1 | ameryhung@gmail.com | skipped |
| 2026-07-23 05:07 UTC | Generate bpf_func_proto for kfunc | 1 | ameryhung@gmail.com | finished in 5h24m0s |
| 2026-07-15 17:21 UTC | Fix leftover issues of the unify bpf_call_arg_meta patchset | 1 | ameryhung@gmail.com | finished in 5h25m0s |
| 2026-07-15 06:40 UTC | Unify helper and kfunc call_arg_meta | 2 | ameryhung@gmail.com | finished in 5h18m0s |
| 2026-07-09 23:02 UTC | Unify helper and kfunc call_arg_meta | 1 | ameryhung@gmail.com | finished in 4h46m0s |
| 2026-07-06 17:19 UTC | bpf: A common way to attach struct_ops to a cgroup | 3 | ameryhung@gmail.com | finished in 4h48m0s |
| 2026-06-23 17:49 UTC | bpf: A common way to attach struct_ops to a cgroup | 2 | ameryhung@gmail.com | finished in 4h10m0s |
| 2026-06-19 06:35 UTC | Fix effective prog array indexing with BPF_F_PREORDER | 2 | ameryhung@gmail.com | finished in 1h20m0s |
| 2026-06-18 22:19 UTC | bpf: Fix effective prog replacement with BPF_F_PREORDER | 1 | ameryhung@gmail.com | finished in 58m0s |