| Published | Title | Version | Author | Status |
|---|---|---|---|---|
| 2026-04-25 10:59 UTC | bpf: prevent offloaded programs from running on host via tcx/netkit | 3 | jiayuan.chen@linux.dev | finished in 4h9m0s |
| 2026-04-24 10:41 UTC | bpf: prevent offloaded programs from running on host via tcx/netkit | 2 | jiayuan.chen@linux.dev | finished in 4h25m0s |
| 2026-04-23 03:36 UTC | bpf: prevent offloaded programs from running on host via tcx/netkit | 1 | jiayuan.chen@linux.dev | finished in 4h18m0s |
| 2026-04-21 15:58 UTC | bpf: Reject TCP_NODELAY in TCP header option | 4 | kafai.wan@linux.dev | finished in 4h26m0s |
| 2026-04-17 09:20 UTC | bpf: Reject TCP_NODELAY in TCP header option callbacks | 3 | kafai.wan@linux.dev | finished in 4h16m0s |
| 2026-04-16 11:23 UTC | bpf: Reject TCP_NODELAY in TCP header option callbacks | 2 | kafai.wan@linux.dev | finished in 4h20m0s |
| 2026-04-14 11:23 UTC | bpf: tcp: Reject TCP_NODELAY from BPF hdr opt callbacks | 1 | kafai.wan@linux.dev | finished in 4h22m0s |
| 2026-04-14 10:57 UTC | bpf,tcp: avoid infinite recursion in BPF_SOCK_OPS_HDR_OPT_LEN_CB | 1 | jiayuan.chen@linux.dev | finished in 4h27m0s |
| 2026-04-09 02:37 UTC | bpf: Fix use-after-free in offloaded map/prog info fill | 2 | jiayuan.chen@linux.dev | finished in 4h20m0s |
| 2026-04-08 10:47 UTC | bpf: Fix use-after-free in offloaded map/prog info fill | 1 | jiayuan.chen@linux.dev | finished in 4h38m0s |
| 2026-04-08 10:04 UTC | bpf: Fix out-of-bounds read in bpf_obj_memcpy | 1 | jiayuan.chen@linux.dev | finished in 4h59m0s |
| 2026-04-07 12:23 UTC | bpf: Drop task_to_inode and inet_conn_established from lsm sleepable hooks | 1 | jiayuan.chen@linux.dev | finished in 1h23m0s |
| 2026-04-07 02:26 UTC | bpf: Fix SOCK_OPS_GET_SK same-register OOB read in sock_ops and add selftest | 3 | jiayuan.chen@linux.dev | finished in 4h20m0s |
| 2026-04-06 03:12 UTC | bpf: Fix same-register dst/src OOB read and pointer leak in sock_ops | 2 | jiayuan.chen@linux.dev | finished in 4h4m0s |
| 2026-04-04 14:09 UTC | bpf: Fix SOCK_OPS_GET_SK same-register OOB read in sock_ops | 1 | jiayuan.chen@linux.dev | finished in 4h12m0s |
| 2026-03-03 09:52 UTC | bpf: fix: Race condition in bpf_trampoline_link_cgroup_shim | 5 | xulang@uniontech.com | finished in 4h10m0s |
| 2026-03-03 08:36 UTC | bpf: fix: Race condition in bpf_trampoline_unlink_cgroup_shim | 4 | xulang@uniontech.com | finished in 4h1m0s |
| 2026-02-28 02:24 UTC | bpf: fix: Race condition in bpf_trampoline_unlink_cgroup_shim | 3 | xulang@uniontech.com | finished in 4h12m0s |
| 2026-02-25 06:54 UTC | bpf: fix: Race condition in bpf_trampoline_unlink_cgroup_shim | 2 | xulang@uniontech.com | finished in 4h43m0s |
| 2026-02-06 07:13 UTC | bpf: fix: Race condition in bpf_trampoline_unlink_cgroup_shim | 1 | xulang@uniontech.com | finished in 4h0m0s |
| 2026-01-27 11:59 UTC | bpf: Fix verifier_bug_if to account for BPF_CALL | 1 | luis.gerhorst@fau.de | finished in 3h55m0s |
| 2026-01-05 11:47 UTC | bpf, test_run: Subtract size of xdp_frame from allowed metadata size | 1 | toke@redhat.com | finished in 4h17m0s |
| 2026-01-04 16:23 UTC | bpf, test_run: Fix user-memory-access vulnerability for LIVE_FRAMES | 1 | kafai.wan@linux.dev |
finished
in 3h59m0s
[1 findings] |
| 2025-12-16 13:29 UTC | bpf: annotate file argument as __nullable in bpf_lsm_mmap_file | 2 | mattbobrowski@google.com | finished in 1h1m0s |
| 2025-12-10 09:07 UTC | bpf: annotate file argument as __nullable in bpf_lsm_mmap_file | 1 | mattbobrowski@google.com | finished in 1h0m0s |
| 2025-11-26 20:29 UTC | bpf: Disable file_alloc_security hook | 1 | ameryhung@gmail.com | finished in 57m0s |
| 2025-11-12 23:23 UTC | bpf: Check skb->transport_header is set in bpf_skb_check_mtu | 1 | martin.lau@linux.dev | finished in 3h49m0s |
| 2025-11-03 06:31 UTC | bpf: Skip bounds adjustment for conditional jumps on same scalar register | 4 | kafai.wan@linux.dev | finished in 4h11m0s |
| 2025-10-31 15:41 UTC | bpf: Skip bounds adjustment for conditional jumps on same scalar register | 3 | kafai.wan@linux.dev | finished in 3h45m0s |
| 2025-10-25 05:30 UTC | bpf: Skip bounds adjustment for conditional jumps on same register | 2 | kafai.wan@linux.dev | finished in 3h41m0s |
| 2025-10-23 12:55 UTC | bpf: Reject negative head_room in __bpf_skb_change_head | 1 | daniel@iogearbox.net | finished in 3h42m0s |
| 2025-10-22 16:44 UTC | bpf: Skip bounds adjustment for conditional jumps on same register | 1 | kafai.wan@linux.dev | finished in 4h1m0s |
| 2025-10-20 07:54 UTC | bpf: Do not let BPF test infra emit invalid GSO types to stack | 1 | daniel@iogearbox.net | finished in 3h58m0s |
| 2025-09-26 17:12 UTC | bpf: Enforce expected_attach_type for tailcall compatibility | 2 | daniel@iogearbox.net | finished in 3h44m0s |
| 2025-09-26 13:50 UTC | bpf: Enforce expected_attach_type for tailcall compatibility | 1 | daniel@iogearbox.net | finished in 3h46m0s |