| Published | Title | Version | Author | Status |
|---|---|---|---|---|
| 2026-07-26 15:51 UTC | bpf: Fix RHash special-field recycling | 1 | gnq25@mails.tsinghua.edu.cn | finished in 5h28m0s |
| 2026-07-06 15:52 UTC | bpf: Reject out-of-range arena free addresses | 1 | gnq25@mails.tsinghua.edu.cn | finished in 4h28m0s |
| 2026-06-28 13:59 UTC | bpf: Enforce gotox targets against subprog bounds | 3 | gnq25@mails.tsinghua.edu.cn | finished in 4h2m0s |
| 2026-06-24 08:39 UTC | bpf: Keep fastcall stack slots for helper stack reads | 1 | gnq25@mails.tsinghua.edu.cn | skipped |
| 2026-06-23 10:43 UTC | bpf: Mask pseudo pointer values in verifier logs | 2 | gnq25@mails.tsinghua.edu.cn | skipped |
| 2026-06-23 10:32 UTC | seg6: validate SRH length before reading fixed fields | 2 | gnq25@mails.tsinghua.edu.cn | finished in 4h29m0s |
| 2026-06-20 15:55 UTC | seg6: validate SRH length before reading fixed fields | 1 | gnq25@mails.tsinghua.edu.cn | finished in 4h26m0s |
| 2026-06-20 15:47 UTC | bpf: Mark bpf_get_kmem_cache() as nullable | 1 | gnq25@mails.tsinghua.edu.cn | finished in 1h19m0s |
| 2026-06-19 16:04 UTC | bpf: Require CAP_BPF for pseudo-BTF ksym loads | 1 | gnq25@mails.tsinghua.edu.cn | finished in 4h16m0s |
| 2026-06-19 14:45 UTC | sched_ext: Mark scx_bpf_cpu_rq() nullable | 1 | gnq25@mails.tsinghua.edu.cn | finished in 57m0s |
| 2026-06-17 17:50 UTC | bpf: Fix stack slot index for Spectre v4 nospec checks | 3 | gnq25@mails.tsinghua.edu.cn | finished in 4h39m0s |
| 2026-06-17 16:45 UTC | bpf: Fix stack slot index for Spectre v4 nospec checks | 2 | gnq25@mails.tsinghua.edu.cn | finished in 4h35m0s |
| 2026-06-17 15:20 UTC | bpf: Preserve pointer spill metadata during half-slot cleanup | 2 | gnq25@mails.tsinghua.edu.cn | finished in 4h36m0s |
| 2026-06-16 16:57 UTC | bpf: Fix stack slot index for Spectre v4 nospec checks | 1 | gnq25@mails.tsinghua.edu.cn | finished in 4h9m0s |
| 2026-06-15 08:57 UTC | bpf: Preserve rdonly_cast dynptr slice lifetime | 1 | gnq25@mails.tsinghua.edu.cn | finished in 4h29m0s |
| 2026-06-15 08:31 UTC | bpf: Gate dynptr probe-read kfuncs like helpers | 1 | gnq25@mails.tsinghua.edu.cn | finished in 4h35m0s |
| 2026-06-15 08:09 UTC | bpf: Preserve pointer spill metadata during half-slot cleanup | 1 | gnq25@mails.tsinghua.edu.cn | finished in 4h9m0s |
| 2026-06-13 12:38 UTC | bpf: Preserve untrusted memory pointer type on scalar add | 2 | gnq25@mails.tsinghua.edu.cn | finished in 4h10m0s |
| 2026-06-13 09:33 UTC | bpf: Enforce gotox targets against subprog bounds | 2 | gnq25@mails.tsinghua.edu.cn | finished in 4h12m0s |
| 2026-06-09 15:03 UTC | bpf: Fix gotox target validation against CFG | 1 | gnq25@mails.tsinghua.edu.cn | finished in 4h25m0s |
| 2026-06-09 14:55 UTC | bpf: Reject scalar addition from untrusted memory | 1 | gnq25@mails.tsinghua.edu.cn | finished in 4h19m0s |
| 2026-06-09 14:43 UTC | bpf: Enforce BTF pointer write checks for global args | 1 | gnq25@mails.tsinghua.edu.cn | finished in 4h52m0s |
| 2026-06-07 13:24 UTC | Keep dynamic inner array lookups nullable | 2 | gnq25@mails.tsinghua.edu.cn | finished in 4h5m0s |
| 2026-06-06 10:50 UTC | bpf, verifier: fix PTR_TO_FLOW_KEYS constant-offset OOB | 3 | gnq25@mails.tsinghua.edu.cn | finished in 3h57m0s |
| 2026-06-04 18:07 UTC | bpf, verifier: fix PTR_TO_FLOW_KEYS constant-offset OOB | 2 | gnq25@mails.tsinghua.edu.cn |
finished
in 1h24m0s
[1 findings] |
| 2026-06-04 15:11 UTC | Keep dynamic inner array lookups nullable | 1 | gnq25@mails.tsinghua.edu.cn | finished in 4h24m0s |
| 2026-06-04 15:07 UTC | bpf, verifier: fix PTR_TO_FLOW_KEYS constant-offset OOB | 1 | gnq25@mails.tsinghua.edu.cn | finished in 4h48m0s |