| Published | Title | Version | Author | Status |
|---|---|---|---|---|
| 2026-06-30 03:25 UTC | bpf: Fix use-after-free on mm_struct in bpf_find_vma() | 6 | sanghyun.park.cnu@gmail.com | finished in 2h28m0s |
| 2026-06-30 02:34 UTC | bpf: Fix use-after-free on mm_struct in bpf_find_vma() | 5 | sanghyun.park.cnu@gmail.com |
finished
in 1h13m0s
[1 findings] |
| 2026-06-29 14:00 UTC | Mixing bpf2bpf and tailcalls for RV64 | 4 | pulehui@huaweicloud.com | finished in 4h35m0s |
| 2026-06-23 17:32 UTC | VMSCAPE optimization for BHI variant | 12 | pawan.kumar.gupta@linux.intel.com | finished in 4h9m0s |
| 2026-06-23 12:02 UTC | bpf: support shift operations with non-const source operand | 1 | ziye@zju.edu.cn | finished in 4h32m0s |
| 2026-06-23 10:43 UTC | bpf: Mask pseudo pointer values in verifier logs | 2 | gnq25@mails.tsinghua.edu.cn | skipped |
| 2026-06-19 16:04 UTC | bpf: Require CAP_BPF for pseudo-BTF ksym loads | 1 | gnq25@mails.tsinghua.edu.cn | finished in 4h16m0s |
| 2026-06-12 12:10 UTC | bpf: support shift operations with non-const source operand | 2 | ziye@zju.edu.cn | finished in 4h25m0s |
| 2026-06-12 09:38 UTC | bpf: support shift operations with non-const source operand | 1 | ziye@zju.edu.cn | finished in 4h52m0s |
| 2026-06-11 16:07 UTC | selftests/bpf: add helper retval linked scalar pruning selftest | 1 | jt26wzz@gmail.com | finished in 1h16m0s |
| 2026-06-10 02:46 UTC | bpf: Fix use-after-free on mm_struct in bpf_find_vma() | 4 | sanghyun.park.cnu@gmail.com | finished in 2h52m0s |
| 2026-06-03 09:19 UTC | btf: reject to register duplicated kfunc | 5 | chensong_2000@126.com | finished in 4h16m0s |
| 2026-06-02 14:47 UTC | tools build: bpf: Append EXTRA_CFLAGS and HOST_EXTRACFLAGS | 2 | leo.yan@arm.com | finished in 1h52m0s |
| 2026-06-02 11:07 UTC | btf: reject to register duplicated kfunc | 4 | chensong_2000@126.com | finished in 4h22m0s |
| 2026-05-26 02:20 UTC | mm: BPF struct_ops for dynamic memory protection and async reclaim | 7 | hui.zhu@linux.dev | finished in 4h13m0s |
| 2026-05-24 08:29 UTC | kernel/bpf/btf.c: reject to register duplicated kfunc | 3 | chensong_2000@126.com | finished in 3h58m0s |
| 2026-05-21 03:22 UTC | bpf: Extend the bpf_list family of APIs | 11 | kaitao.cheng@linux.dev | finished in 4h25m0s |
| 2026-05-16 07:08 UTC | cgroup/rstat: validate cpu before css_rstat_cpu() access | 2 | a0yami@mailbox.org | finished in 3h55m0s |
| 2026-05-13 05:08 UTC | libbpf: Use strscpy() in kernel code for skel_map_create() | 5 | kees@kernel.org | finished in 5h1m0s |
| 2026-05-12 15:31 UTC | bpf: Extend BPF syscall with common attributes support | 14 | leon.hwang@linux.dev | finished in 4h42m0s |
| 2026-05-12 05:59 UTC | bpf: Extend the bpf_list family of APIs | 10 | kaitao.cheng@linux.dev | finished in 4h19m0s |
| 2026-05-11 15:28 UTC | bpf: Extend BPF syscall with common attributes support | 13 | leon.hwang@linux.dev | finished in 4h27m0s |
| 2026-05-06 09:47 UTC | bpf: Fix call offset truncation and OOB read in bpf_patch_call_args() | 10 | tangyazhou@zju.edu.cn | finished in 4h33m0s |
| 2026-04-30 04:34 UTC | bpf: crypto: snapshot params before string validation | 3 | pengpeng@iscas.ac.cn | finished in 2h32m0s |
| 2026-04-29 17:19 UTC | bpf: Fix call offset truncation and OOB read in bpf_patch_call_args() | 9 | tangyazhou@zju.edu.cn | finished in 4h52m0s |
| 2026-04-29 10:56 UTC | bpf: Fix call offset truncation and OOB read in bpf_patch_call_args() | 8 | tangyazhou@zju.edu.cn | finished in 4h32m0s |
| 2026-04-27 16:58 UTC | bpf: Extend the bpf_list family of APIs | 10 | kaitao.cheng@linux.dev | finished in 4h48m0s |
| 2026-04-23 18:38 UTC | bpf: Fix NULL pointer dereference in bpf_skb_fib_lookup() | 2 | bestswngs@gmail.com | finished in 4h11m0s |
| 2026-04-23 15:58 UTC | bpf, sockmap: Fix wrong rsge offset in bpf_msg_push_data() | 1 | bestswngs@gmail.com | finished in 4h10m0s |
| 2026-04-23 15:34 UTC | bpf: crypto: snapshot params before string validation | 2 | pengpeng@iscas.ac.cn | finished in 2h3m0s |
| 2026-04-23 06:14 UTC | VMSCAPE optimization for BHI variant | 11 | pawan.kumar.gupta@linux.intel.com | finished in 3h59m0s |
| 2026-04-21 14:45 UTC | bpf: Fix call offset truncation and OOB read in bpf_patch_call_args() | 7 | tangyazhou@zju.edu.cn | finished in 4h33m0s |
| 2026-04-20 22:16 UTC | bpf: guard sock_ops rtt_min against non-locked tcp_sock | 4 | werner@verivus.ai | finished in 4h10m0s |
| 2026-04-20 14:17 UTC | bpf: Extend BPF syscall with common attributes support | 12 | leon.hwang@linux.dev | skipped |
| 2026-04-19 17:01 UTC | bpf: Fix NULL pointer dereference in bpf_skb_fib_lookup() | 1 | bestswngs@gmail.com | finished in 4h11m0s |
| 2026-04-17 07:31 UTC | bpf: crypto: reject unterminated type and algorithm names | 1 | pengpeng@iscas.ac.cn | finished in 2h15m0s |
| 2026-04-17 02:31 UTC | bpf: fix sock_ops rtt_min OOB read | 3 | werner@verivus.ai | finished in 4h7m0s |
| 2026-04-14 14:13 UTC | bpf, sockmap: Fix af_unix null-ptr-deref in proto update | 4 | mhal@rbox.co | finished in 3h59m0s |
| 2026-04-14 10:57 UTC | bpf,tcp: avoid infinite recursion in BPF_SOCK_OPS_HDR_OPT_LEN_CB | 1 | jiayuan.chen@linux.dev | finished in 4h27m0s |
| 2026-04-14 07:05 UTC | VMSCAPE optimization for BHI variant | 10 | pawan.kumar.gupta@linux.intel.com | finished in 4h36m0s |
| 2026-04-12 17:03 UTC | bpf: Fix s16 truncation for large bpf-to-bpf call offsets | 6 | tangyazhou@zju.edu.cn | finished in 4h0m0s |
| 2026-04-12 03:03 UTC | bpf: fix sock_ops rtt_min OOB read and related guard issues | 2 | werner@verivus.ai | finished in 4h11m0s |
| 2026-04-12 02:27 UTC | bpf: Fix arena VMA use-after-free on fork | 4 | bestswngs@gmail.com | finished in 3h58m0s |
| 2026-04-11 20:08 UTC | bpf: Fix arena VMA use-after-free on fork | 3 | bestswngs@gmail.com | finished in 4h13m0s |
| 2026-04-11 11:29 UTC | bpf: Fix arena VMA use-after-free on fork | 2 | bestswngs@gmail.com | finished in 4h14m0s |
| 2026-04-11 11:20 UTC | bpf: Fix arena VMA use-after-free on fork | 1 | bestswngs@gmail.com | finished in 4h30m0s |
| 2026-04-11 01:32 UTC | net: add missing syncookie statistics for BPF custom syncookies | 2 | jiayuan.chen@linux.dev | finished in 4h10m0s |
| 2026-04-11 00:55 UTC | net,bpf: fix null-ptr-deref in xdp_master_redirect() for bonding and add selftest | 7 | jiayuan.chen@linux.dev | finished in 4h14m0s |
| 2026-04-10 15:17 UTC | Direct Map Removal Support for guest_memfd | 12 | kalyazin@amazon.co.uk | finished in 4h7m0s |
| 2026-04-10 14:07 UTC | bpf: reuseport: add cond_resched_rcu() in reuseport_array_free() | 1 | yzjaurora@gmail.com | finished in 4h24m0s |
| 2026-04-10 13:13 UTC | kbuild/btf: Remove broken module relinking exclusion | 1 | petr.pavlu@suse.com | finished in 1h3m0s |
| 2026-04-10 11:37 UTC | net,bpf: fix null-ptr-deref in xdp_master_redirect() for bonding and add selftest | 6 | jiayuan.chen@linux.dev | finished in 4h13m0s |
| 2026-04-08 03:46 UTC | bpf: fix short IPv4/IPv6 handling in test_run_skb | 4 | sun.jian.kdev@gmail.com | finished in 4h2m0s |
| 2026-04-07 10:48 UTC | bpf: Fix suspicious RCU usage in LPM trie for sleepable programs | 1 | leitao@debian.org | finished in 4h16m0s |
| 2026-04-07 10:38 UTC | bpf: Fix RCU stall in bpf_fd_array_map_clear() | 4 | rhkrqnwk98@gmail.com | finished in 4h18m0s |
| 2026-04-03 10:50 UTC | powerpc64/bpf: Add powerpc64 JIT support for timed may_goto | 3 | skb99@linux.ibm.com | finished in 1h38m0s |
| 2026-04-03 10:41 UTC | bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() | 2 | bestswngs@gmail.com | finished in 2h58m0s |
| 2026-04-03 03:51 UTC | bpf: reject negative CO-RE accessor indices in bpf_core_parse_spec() | 1 | bestswngs@gmail.com | finished in 2h40m0s |
| 2026-04-03 00:30 UTC | VMSCAPE optimization for BHI variant | 9 | pawan.kumar.gupta@linux.intel.com | finished in 4h18m0s |
| 2026-04-02 16:10 UTC | powerpc64/bpf: Add powerpc64 JIT support for timed may_goto | 2 | skb99@linux.ibm.com | finished in 58m0s |
| 2026-04-02 16:01 UTC | bpf: reject short IPv4/IPv6 inputs in bpf_prog_test_run_skb | 3 | sun.jian.kdev@gmail.com | finished in 4h19m0s |
| 2026-04-02 14:17 UTC | kbuild/btf: Avoid relinking modules when only vmlinux changes | 1 | petr.pavlu@suse.com | finished in 57m0s |
| 2026-04-02 12:18 UTC | bpf: Fix stale offload->prog pointer after constant blinding | 1 | 1037827920@qq.com | finished in 4h20m0s |
| 2026-04-02 07:42 UTC | bpf: Fix OOB in pcpu_init_value and add a test | 5 | xulang@uniontech.com | finished in 4h32m0s |
| 2026-04-02 06:31 UTC | bpf: Fix OOB in pcpu_init_value | 4 | xulang@uniontech.com | finished in 4h17m0s |
| 2026-04-02 05:42 UTC | powerpc64/bpf: Add powerpc64 JIT support for timed may_goto | 1 | skb99@linux.ibm.com | finished in 1h5m0s |
| 2026-04-01 19:26 UTC | bpf: fix end-of-list detection in cgroup_storage_get_next_key() | 1 | bestswngs@gmail.com | finished in 1h32m0s |
| 2026-04-01 11:04 UTC | bpf: tcp: Fix null-ptr-deref in arbitrary SYN Cookie | 5 | jiayuan.chen@linux.dev | finished in 4h24m0s |
| 2026-04-01 07:44 UTC | Deprecate Legacy IP | 1 | dwmw2@infradead.org |
finished
in 3h0m0s
[1 findings] |
| 2026-04-01 00:11 UTC | libbpf: Replace strncpy() with strnlen()+memcpy() in skel_map_create() | 4 | kees@kernel.org | finished in 4h31m0s |
| 2026-03-31 07:04 UTC | selftests/bpf: test access to ringbuf position with map pointer | 3 | menglong8.dong@gmail.com | finished in 1h17m0s |
| 2026-03-31 05:56 UTC | Firmware LSM hook | 2 | leon@kernel.org | finished in 4h11m0s |
| 2026-03-31 02:30 UTC | bpf: Fix RCU stall in bpf_fd_array_map_clear() | 3 | rhkrqnwk98@gmail.com | finished in 4h16m0s |
| 2026-03-30 22:38 UTC | [next] bpf: Avoid thousands of -Wflex-array-members-not-at-end warnings | 2 | gustavoars@kernel.org | finished in 4h31m0s |
| 2026-03-30 08:07 UTC | bpf: tcp: Fix null-ptr-deref in arbitrary SYN Cookie | 4 | jiayuan.chen@linux.dev | finished in 4h11m0s |
| 2026-03-29 18:04 UTC | net: clear the dst when performing encap / decap | 2 | kuba@kernel.org | finished in 4h3m0s |
| 2026-03-29 16:17 UTC | selftests/bpf: Reject malformed IPv4/IPv6 skb test input | 2 | sun.jian.kdev@gmail.com | finished in 4h22m0s |
| 2026-03-29 14:04 UTC | bpf: Extend the bpf_list family of APIs | 9 | pilgrimtao@gmail.com | finished in 4h13m0s |
| 2026-03-29 12:50 UTC | selftests/bpf: Reject malformed IPv4/IPv6 skb test input | 1 | sun.jian.kdev@gmail.com | finished in 4h1m0s |
| 2026-03-29 02:07 UTC | bpf: Fix RCU stall in bpf_fd_array_map_clear() | 2 | rhkrqnwk98@gmail.com | finished in 4h6m0s |
| 2026-03-27 13:38 UTC | bpf: tcp: Fix null-ptr-deref in arbitrary SYN Cookie | 3 | jiayuan.chen@linux.dev | finished in 4h28m0s |
| 2026-03-26 11:25 UTC | Support BPF traversal of wakeup sources | 2 | wusamuel@google.com | finished in 4h22m0s |
| 2026-03-26 09:01 UTC | bpf: Fix s16 truncation for large bpf-to-bpf call offsets | 5 | tangyazhou@zju.edu.cn | finished in 3h58m0s |
| 2026-03-26 06:33 UTC | bpf: Fix s16 truncation for large bpf-to-bpf call offsets | 4 | tangyazhou@zju.edu.cn | finished in 4h23m0s |
| 2026-03-26 06:26 UTC | bpf: tcp: Fix null-ptr-deref in arbitrary SYN Cookie | 2 | jiayuan.chen@linux.dev | finished in 4h33m0s |
| 2026-03-24 18:16 UTC | VMSCAPE optimization for BHI variant | 8 | pawan.kumar.gupta@linux.intel.com | finished in 4h1m0s |
| 2026-03-24 16:16 UTC | libbpf: Replace strncpy() with strnlen()+memcpy() in skel_map_create() | 3 | kees@kernel.org | finished in 4h21m0s |
| 2026-03-24 15:22 UTC | bpf: Update MAINTAINERS | 1 | memxor@gmail.com | finished in 1h14m0s |
| 2026-03-24 15:04 UTC | bpf: Enhance freplace compatibility | 1 | leon.hwang@linux.dev | finished in 4h35m0s |
| 2026-03-24 05:30 UTC | libbpf: Replace strncpy() with strnlen()+memcpy() in skel_map_create() | 2 | kees@kernel.org | finished in 4h16m0s |
| 2026-03-24 04:49 UTC | selftests/bpf: move trampoline_count to dedicated bpf_testmod target | 4 | sun.jian.kdev@gmail.com | finished in 49m0s |
| 2026-03-24 04:05 UTC | libbpf: Replace strncpy() with strnlen()+memcpy() in skel_map_create() | 1 | kees@kernel.org | finished in 4h15m0s |
| 2026-03-23 15:40 UTC | tools build: bpf: Append EXTRA_CFLAGS and HOST_EXTRACFLAGS | 1 | leo.yan@arm.com | finished in 1h14m0s |
| 2026-03-23 12:22 UTC | bpf: Fix s16 truncation for large bpf-to-bpf call offsets | 3 | tangyazhou@zju.edu.cn | finished in 4h6m0s |
| 2026-03-23 10:54 UTC | bpf: tcp: Fix null-ptr-deref in arbitrary SYN Cookie | 1 | jiayuan.chen@linux.dev | finished in 4h30m0s |
| 2026-03-23 09:05 UTC | bpf: Drop redundant CONT_JMP alias | 1 | ziye@zju.edu.cn | finished in 1h26m0s |
| 2026-03-23 08:17 UTC | bpf: Fix s16 truncation for large bpf-to-bpf call offsets | 2 | tangyazhou@zju.edu.cn | finished in 4h5m0s |
| 2026-03-23 08:11 UTC | selftests/bpf: Improve connect_force_port test reliability | 3 | varunrmallya@gmail.com | finished in 1h13m0s |
| 2026-03-23 02:18 UTC | selftests/bpf: test access to ringbuf position with map pointer | 2 | menglong8.dong@gmail.com | finished in 1h14m0s |
| 2026-03-22 20:47 UTC | selftests/bpf: Improve connect_force_port test reliability | 2 | varunrmallya@gmail.com | finished in 1h5m0s |