| Published | Title | Version | Author | Status |
|---|---|---|---|---|
| 2026-06-15 14:14 UTC | bpf: Fix packet pointer invalidation for skb dynptr writes | 3 | chenyy23@mails.tsinghua.edu.cn | finished in 5h0m0s |
| 2026-06-15 12:28 UTC | bpf: Fix packet pointer invalidation for skb dynptr writes | 2 | chenyy23@mails.tsinghua.edu.cn | finished in 4h58m0s |
| 2026-06-15 08:09 UTC | bpf: Preserve pointer spill metadata during half-slot cleanup | 1 | gnq25@mails.tsinghua.edu.cn | finished in 4h9m0s |
| 2026-06-14 21:02 UTC | arm64: mm: Remove misleading pte_none() comment from ptep_try_set() | 1 | tj@kernel.org | finished in 1h6m0s |
| 2026-06-14 18:04 UTC | selftests/bpf: Add arena direct-value boundary test | 2 | find.dhiraj@gmail.com | finished in 55m0s |
| 2026-06-14 16:33 UTC | selftests/bpf: Add arena direct-value boundary test | 1 | find.dhiraj@gmail.com | finished in 59m0s |
| 2026-06-13 16:24 UTC | bpf: Fix bpf_get/setsockopt to tos for ipv4-mapped ipv6 socket | 4 | leon.hwang@linux.dev | finished in 4h20m0s |
| 2026-06-13 11:16 UTC | bpf: Preserve scalar zero spills for var-offset stack reads | 2 | random6.xyz@gmail.com | finished in 4h25m0s |
| 2026-06-12 13:07 UTC | bpf, skmsg: some fixes for skmsg | 3 | jiayuan.chen@linux.dev | finished in 4h47m0s |
| 2026-06-12 11:40 UTC | bpf: Fix generic devmap egress skb sharing | 5 | sun.jian.kdev@gmail.com | finished in 4h15m0s |
| 2026-06-12 05:26 UTC | selftests/bpf: Add arena direct-value one-past-end reject test | 4 | random6.xyz@gmail.com | finished in 1h24m0s |
| 2026-06-12 04:24 UTC | libbpf: Allow callbacks at consumption time | 1 | tamird@kernel.org | finished in 1h40m0s |
| 2026-06-11 14:35 UTC | selftests/bpf: Add test for sleepable lsm_cgroup rejection | 1 | dwindsor@gmail.com | finished in 1h13m0s |
| 2026-06-11 12:34 UTC | bpf, skmsg: some fixes for skmsg | 2 | jiayuan.chen@linux.dev | finished in 4h49m0s |
| 2026-06-11 08:08 UTC | bpf: Fix generic devmap egress skb sharing | 4 | sun.jian.kdev@gmail.com | finished in 4h6m0s |
| 2026-06-11 04:33 UTC | bpf: Fix generic devmap egress skb sharing | 3 | sun.jian.kdev@gmail.com | finished in 4h15m0s |
| 2026-06-10 10:28 UTC | bpf: Run generic devmap egress prog on private skb | 2 | sun.jian.kdev@gmail.com | finished in 4h26m0s |
| 2026-06-10 08:11 UTC | bpf, sockmap: fix bpf_msg_pop_data() integer overflow | 2 | rhkrqnwk98@gmail.com | finished in 4h39m0s |
| 2026-06-10 07:13 UTC | selftests/bpf: Add arena direct-value one-past-end reject test | 3 | random6.xyz@gmail.com | finished in 1h47m0s |
| 2026-06-10 02:46 UTC | bpf: Fix use-after-free on mm_struct in bpf_find_vma() | 4 | sanghyun.park.cnu@gmail.com | finished in 2h52m0s |
| 2026-06-09 20:25 UTC | Fix kptr dtor deadlock | 3 | memxor@gmail.com | finished in 4h19m0s |
| 2026-06-09 13:55 UTC | bpf, lpm_trie: Allow sleepable BPF programs to use LPM tries | 2 | vlad.wing@gmail.com | finished in 4h34m0s |
| 2026-06-09 09:37 UTC | Fix kptr dtor deadlock | 2 | memxor@gmail.com | finished in 4h10m0s |
| 2026-06-09 08:37 UTC | selftests/bpf: add tests for arena vma split and fork | 3 | linuxoid@gmail.com | finished in 1h29m0s |
| 2026-06-09 06:36 UTC | selftests/bpf: libarena: Avoid spurious spmc parallel selftest errors | 2 | emil@etsalapatis.com | finished in 1h38m0s |
| 2026-06-08 22:47 UTC | selftests/bpf: libarena: Avoid spurious spmc parallel selftest errors | 1 | emil@etsalapatis.com | finished in 1h29m0s |
| 2026-06-08 14:48 UTC | Fix kptr dtor deadlock | 1 | memxor@gmail.com | finished in 4h43m0s |
| 2026-06-08 07:25 UTC | arm64: mm: Complete the PTE store in ptep_try_set() | 2 | tj@kernel.org | finished in 1h17m0s |
| 2026-06-07 07:59 UTC | arm64: mm: Complete the PTE store in ptep_try_set() | 1 | tj@kernel.org | finished in 1h13m0s |
| 2026-06-06 10:50 UTC | bpf, verifier: fix PTR_TO_FLOW_KEYS constant-offset OOB | 3 | gnq25@mails.tsinghua.edu.cn | finished in 3h57m0s |
| 2026-06-05 22:20 UTC | selftests/bpf: libarena: Add initial data structures | 4 | emil@etsalapatis.com | finished in 1h32m0s |
| 2026-06-05 11:57 UTC | selftests/bpf: add arena split and fork tests | 2 | linuxoid@gmail.com | finished in 1h11m0s |
| 2026-06-05 11:41 UTC | bpf: Introduce resizable hash map | 7 | mykyta.yatsenko5@gmail.com | finished in 4h24m0s |
| 2026-06-05 06:33 UTC | Redesign Verification Errors | 1 | memxor@gmail.com | finished in 3h59m0s |
| 2026-06-04 23:50 UTC | selftests/bpf: libarena: Add initial data structures | 3 | emil@etsalapatis.com | finished in 1h26m0s |
| 2026-06-04 18:42 UTC | MAINTAINERS: BPF: Add self as reviewer and run parse_maintainers.pl | 1 | emil@etsalapatis.com | finished in 1h42m0s |
| 2026-06-04 18:07 UTC | bpf, verifier: fix PTR_TO_FLOW_KEYS constant-offset OOB | 2 | gnq25@mails.tsinghua.edu.cn |
finished
in 1h24m0s
[1 findings] |
| 2026-06-04 15:23 UTC | selftests/bpf: Add arena direct-value one-past-end reject test | 2 | random6.xyz@gmail.com | finished in 1h27m0s |
| 2026-06-04 15:07 UTC | bpf, verifier: fix PTR_TO_FLOW_KEYS constant-offset OOB | 1 | gnq25@mails.tsinghua.edu.cn | finished in 4h48m0s |
| 2026-06-03 20:18 UTC | bpf: clean up btf_scan_decl_tags() | 1 | mattbobrowski@google.com | finished in 5h21m0s |
| 2026-06-03 18:27 UTC | selftests/bpf: libarena: Add initial data structures | 2 | emil@etsalapatis.com | finished in 1h57m0s |
| 2026-06-03 10:53 UTC | bpf: fix sysctl new-value handling in __cgroup_bpf_run_filter_sysctl | 3 | dawei.feng@seu.edu.cn | finished in 1h19m0s |
| 2026-06-02 20:45 UTC | bpf: Introduce resizable hash map | 6 | mykyta.yatsenko5@gmail.com | finished in 4h19m0s |
| 2026-06-02 00:41 UTC | Minimize annotations for arena programs | 3 | emil@etsalapatis.com | finished in 4h42m0s |
| 2026-06-01 18:37 UTC | bpf: Replace scratch PTE atomically when allocating arena pages | 1 | tj@kernel.org | finished in 5h11m0s |
| 2026-05-31 16:58 UTC | bpf: Overwrite scratch PTE when allocating arena pages | 1 | tj@kernel.org | finished in 1h50m0s |
| 2026-05-31 13:52 UTC | selftests/bpf: Add arena invalid node id test | 1 | random6.xyz@gmail.com | finished in 59m0s |
| 2026-05-30 00:22 UTC | bpf: Minimize annotations for arena programs | 2 | emil@etsalapatis.com | finished in 4h3m0s |
| 2026-05-29 03:10 UTC | bpf: cgroup: fix sysctl new-value handling in __cgroup_bpf_run_filter_sysctl | 2 | dawei.feng@seu.edu.cn | finished in 1h26m0s |
| 2026-05-28 17:47 UTC | bpf: Introduce resizable hash map | 5 | mykyta.yatsenko5@gmail.com | finished in 4h37m0s |
| 2026-05-28 06:21 UTC | bpf: reject overlarge global subprog argument sizes | 3 | hataegu0826@gmail.com | finished in 4h36m0s |
| 2026-05-27 19:26 UTC | bpf: Fix bpf_arena_handle_page_fault() redefinition without CONFIG_BPF_SYSCALL | 1 | tj@kernel.org | finished in 1h54m0s |
| 2026-05-27 07:14 UTC | bpf: Minimize annotations for arena programs | 1 | emil@etsalapatis.com | skipped |
| 2026-05-24 11:42 UTC | bpf: Add kernel-doc for arena page kfuncs | 2 | find.dhiraj@gmail.com | finished in 59m0s |
| 2026-05-21 03:22 UTC | bpf: Extend the bpf_list family of APIs | 11 | kaitao.cheng@linux.dev | finished in 4h25m0s |
| 2026-05-13 22:36 UTC | bpf: Introduce resizable hash map | 4 | mykyta.yatsenko5@gmail.com | finished in 4h34m0s |
| 2026-05-12 05:59 UTC | bpf: Extend the bpf_list family of APIs | 10 | kaitao.cheng@linux.dev | finished in 4h19m0s |
| 2026-05-11 21:40 UTC | selftests/bpf: libarena: Add initial data structures | 1 | emil@etsalapatis.com | finished in 1h12m0s |
| 2026-05-11 21:07 UTC | selftests/bpf: libarena: Add initial data structures | 1 | emil@etsalapatis.com | finished in 1h22m0s |
| 2026-05-06 09:47 UTC | bpf: Fix call offset truncation and OOB read in bpf_patch_call_args() | 10 | tangyazhou@zju.edu.cn | finished in 4h33m0s |
| 2026-04-29 17:19 UTC | bpf: Fix call offset truncation and OOB read in bpf_patch_call_args() | 9 | tangyazhou@zju.edu.cn | finished in 4h52m0s |
| 2026-04-29 10:56 UTC | bpf: Fix call offset truncation and OOB read in bpf_patch_call_args() | 8 | tangyazhou@zju.edu.cn | finished in 4h32m0s |
| 2026-04-27 16:58 UTC | bpf: Extend the bpf_list family of APIs | 10 | kaitao.cheng@linux.dev | finished in 4h48m0s |
| 2026-04-27 10:51 UTC | bpf/arena: Direct kernel-side access | 1 | tj@kernel.org | skipped |
| 2026-04-26 19:03 UTC | Introduce arena library and runtime | 9 | emil@etsalapatis.com | finished in 53m0s |
| 2026-04-24 19:50 UTC | bpf: Introduce resizable hash map | 3 | mykyta.yatsenko5@gmail.com | finished in 4h29m0s |
| 2026-04-21 16:50 UTC | Introduce arena library and runtime | 8 | emil@etsalapatis.com | finished in 55m0s |
| 2026-04-21 14:45 UTC | bpf: Fix call offset truncation and OOB read in bpf_patch_call_args() | 7 | tangyazhou@zju.edu.cn | finished in 4h33m0s |
| 2026-04-20 09:37 UTC | selftests/bpf: fix off-by-one in bpf_cpumask_populate related selftest | 1 | mattbobrowski@google.com | finished in 1h37m0s |
| 2026-04-18 01:38 UTC | rhashtable: Restore insecure_elasticity toggle | 1 | herbert@gondor.apana.org.au |
finished
in 51m0s
[1 findings] |
| 2026-04-12 17:45 UTC | Introduce arena library and runtime | 7 | emil@etsalapatis.com | finished in 4h23m0s |
| 2026-04-12 17:03 UTC | bpf: Fix s16 truncation for large bpf-to-bpf call offsets | 6 | tangyazhou@zju.edu.cn | finished in 4h0m0s |
| 2026-04-12 06:03 UTC | bpf: add the missing fsession | 3 | menglong8.dong@gmail.com | finished in 4h10m0s |
| 2026-04-12 02:27 UTC | bpf: Fix arena VMA use-after-free on fork | 4 | bestswngs@gmail.com | finished in 3h58m0s |
| 2026-04-12 01:18 UTC | Introduce arena library and runtime | 6 | emil@etsalapatis.com | finished in 4h4m0s |
| 2026-04-11 20:08 UTC | bpf: Fix arena VMA use-after-free on fork | 3 | bestswngs@gmail.com | finished in 4h13m0s |
| 2026-04-10 16:30 UTC | Introduce arena library and runtime | 5 | emil@etsalapatis.com | finished in 4h4m0s |
| 2026-04-08 06:21 UTC | bpf: add the missing fsession | 2 | menglong8.dong@gmail.com | finished in 4h1m0s |
| 2026-04-08 03:14 UTC | bpf: add the missing fsession | 1 | menglong8.dong@gmail.com | finished in 4h33m0s |
| 2026-04-07 20:39 UTC | tracing: Fix kprobe attachment when module shadows vmlinux symbol | 7 | andrey.grodzovsky@crowdstrike.com | finished in 59m0s |
| 2026-04-07 16:51 UTC | tracing: Fix kprobe attachment when module shadows vmlinux symbol | 6 | andrey.grodzovsky@crowdstrike.com | finished in 1h8m0s |
| 2026-04-07 04:57 UTC | Introduce arena library and runtime | 4 | emil@etsalapatis.com | finished in 4h5m0s |
| 2026-04-07 02:26 UTC | bpf: Fix SOCK_OPS_GET_SK same-register OOB read in sock_ops and add selftest | 3 | jiayuan.chen@linux.dev | finished in 4h20m0s |
| 2026-04-06 19:43 UTC | Allow variable offsets for syscall PTR_TO_CTX | 5 | memxor@gmail.com | finished in 3h50m0s |
| 2026-04-06 03:12 UTC | bpf: Fix same-register dst/src OOB read and pointer leak in sock_ops | 2 | jiayuan.chen@linux.dev | finished in 4h4m0s |
| 2026-04-03 04:27 UTC | Introduce arena library and runtime | 3 | emil@etsalapatis.com | finished in 4h17m0s |
| 2026-04-01 12:28 UTC | Allow variable offsets for syscall PTR_TO_CTX | 4 | memxor@gmail.com | finished in 4h19m0s |
| 2026-03-29 14:04 UTC | bpf: Extend the bpf_list family of APIs | 9 | pilgrimtao@gmail.com | finished in 4h13m0s |
| 2026-03-26 09:01 UTC | bpf: Fix s16 truncation for large bpf-to-bpf call offsets | 5 | tangyazhou@zju.edu.cn | finished in 3h58m0s |
| 2026-03-26 06:33 UTC | bpf: Fix s16 truncation for large bpf-to-bpf call offsets | 4 | tangyazhou@zju.edu.cn | finished in 4h23m0s |
| 2026-03-23 12:22 UTC | bpf: Fix s16 truncation for large bpf-to-bpf call offsets | 3 | tangyazhou@zju.edu.cn | finished in 4h6m0s |
| 2026-03-23 08:17 UTC | bpf: Fix s16 truncation for large bpf-to-bpf call offsets | 2 | tangyazhou@zju.edu.cn | finished in 4h5m0s |
| 2026-03-18 10:35 UTC | Allow variable offsets for syscall PTR_TO_CTX | 3 | memxor@gmail.com | finished in 4h18m0s |
| 2026-03-18 07:51 UTC | Allow variable offsets for syscall PTR_TO_CTX | 2 | memxor@gmail.com | finished in 4h8m0s |
| 2026-03-17 17:39 UTC | libbpf: Add bpf_program__clone() for individual program loading | 4 | mykyta.yatsenko5@gmail.com | finished in 58m0s |
| 2026-03-17 02:05 UTC | selftests/bpf: Add alignment flag for test_verifier 190 testcase | 2 | yangtiezhu@loongson.cn | finished in 1h17m0s |
| 2026-03-16 22:27 UTC | bpf: Always defer local storage free | 1 | arighi@nvidia.com | finished in 3h32m0s |
| 2026-03-16 21:49 UTC | libbpf: Add bpf_program__clone() for individual program loading | 3 | mykyta.yatsenko5@gmail.com | finished in 53m0s |
| 2026-03-16 16:12 UTC | bpf: Relax 8 frame limitation for global subprogs | 6 | emil@etsalapatis.com | finished in 4h5m0s |
| 2026-03-12 20:53 UTC | bpf: Release module BTF IDR before module unload | 3 | memxor@gmail.com | finished in 4h15m0s |