| Published | Title | Version | Author | Status |
|---|---|---|---|---|
| 2026-06-15 17:49 UTC | bpf: Fix packet pointer invalidation for skb dynptr writes | 5 | chenyy23@mails.tsinghua.edu.cn | in progress |
| 2026-06-15 15:26 UTC | bpf: Introduce global percpu data | 6 | leon.hwang@linux.dev | finished in 4h32m0s |
| 2026-06-15 15:15 UTC | bpf: Fix packet pointer invalidation for skb dynptr writes | 4 | chenyy23@mails.tsinghua.edu.cn | finished in 4h44m0s |
| 2026-06-15 14:14 UTC | bpf: Fix packet pointer invalidation for skb dynptr writes | 3 | chenyy23@mails.tsinghua.edu.cn | finished in 5h0m0s |
| 2026-06-15 12:28 UTC | bpf: Fix packet pointer invalidation for skb dynptr writes | 2 | chenyy23@mails.tsinghua.edu.cn | finished in 4h58m0s |
| 2026-06-15 08:09 UTC | bpf: Preserve pointer spill metadata during half-slot cleanup | 1 | gnq25@mails.tsinghua.edu.cn | finished in 4h9m0s |
| 2026-06-15 07:38 UTC | Fix partial copy of non-linear skb test_run output | 1 | sun.jian.kdev@gmail.com | finished in 4h14m0s |
| 2026-06-14 18:04 UTC | selftests/bpf: Add arena direct-value boundary test | 2 | find.dhiraj@gmail.com | finished in 55m0s |
| 2026-06-14 16:33 UTC | selftests/bpf: Add arena direct-value boundary test | 1 | find.dhiraj@gmail.com | finished in 59m0s |
| 2026-06-14 09:26 UTC | libbpf: Reject out-of-range linker relocation offsets | 2 | sammiee5311@gmail.com | finished in 59m0s |
| 2026-06-14 07:17 UTC | tcp: Replace min_tso_segs() with tso_segs() CC callback for TCP Prague | 2 | chia-yu.chang@nokia-bell-labs.com | finished in 3h55m0s |
| 2026-06-14 05:39 UTC | libbpf: Reject out-of-range linker relocation offsets | 1 | sammiee5311@gmail.com | finished in 1h29m0s |
| 2026-06-14 01:48 UTC | libbpf: Fix ring buffer consumption | 1 | tamird@kernel.org | finished in 1h24m0s |
| 2026-06-13 22:48 UTC | bpf: Support RX/TX HW timestamp proxy. | 3 | kuniyu@google.com | finished in 4h29m0s |
| 2026-06-13 16:24 UTC | bpf: Fix bpf_get/setsockopt to tos for ipv4-mapped ipv6 socket | 4 | leon.hwang@linux.dev | finished in 4h20m0s |
| 2026-06-13 12:38 UTC | bpf: Preserve untrusted memory pointer type on scalar add | 2 | gnq25@mails.tsinghua.edu.cn | finished in 4h10m0s |
| 2026-06-13 11:16 UTC | bpf: Preserve scalar zero spills for var-offset stack reads | 2 | random6.xyz@gmail.com | finished in 4h25m0s |
| 2026-06-12 19:58 UTC | m68k, bpf: Add initial BPF JIT compiler support | 4 | visitorckw@gmail.com | finished in 1h37m0s |
| 2026-06-12 13:07 UTC | bpf, skmsg: some fixes for skmsg | 3 | jiayuan.chen@linux.dev | finished in 4h47m0s |
| 2026-06-12 12:10 UTC | bpf: support shift operations with non-const source operand | 2 | ziye@zju.edu.cn | finished in 4h25m0s |
| 2026-06-12 09:38 UTC | bpf: support shift operations with non-const source operand | 1 | ziye@zju.edu.cn | finished in 4h52m0s |
| 2026-06-12 05:26 UTC | selftests/bpf: Add arena direct-value one-past-end reject test | 4 | random6.xyz@gmail.com | finished in 1h24m0s |
| 2026-06-12 04:24 UTC | libbpf: Allow callbacks at consumption time | 1 | tamird@kernel.org | finished in 1h40m0s |
| 2026-06-11 16:07 UTC | selftests/bpf: add helper retval linked scalar pruning selftest | 1 | jt26wzz@gmail.com | finished in 1h16m0s |
| 2026-06-11 14:35 UTC | selftests/bpf: Add test for sleepable lsm_cgroup rejection | 1 | dwindsor@gmail.com | finished in 1h13m0s |
| 2026-06-11 12:34 UTC | bpf, skmsg: some fixes for skmsg | 2 | jiayuan.chen@linux.dev | finished in 4h49m0s |
| 2026-06-11 10:11 UTC | bpf: Track spilled zero scalars for var-off stack reads | 1 | random6.xyz@gmail.com | finished in 4h35m0s |
| 2026-06-11 06:18 UTC | mm: split the file's i_mmap tree for NUMA | 2 | huangsj@hygon.cn |
finished
in 1h45m0s
[1 findings] |
| 2026-06-10 10:28 UTC | bpf: Run generic devmap egress prog on private skb | 2 | sun.jian.kdev@gmail.com | finished in 4h26m0s |
| 2026-06-10 08:14 UTC | bpf: Validate BTF repeated field counts before expansion | 2 | p@1g4.org | finished in 4h37m0s |
| 2026-06-10 08:11 UTC | bpf, sockmap: fix bpf_msg_pop_data() integer overflow | 2 | rhkrqnwk98@gmail.com | finished in 4h39m0s |
| 2026-06-10 07:13 UTC | selftests/bpf: Add arena direct-value one-past-end reject test | 3 | random6.xyz@gmail.com | finished in 1h47m0s |
| 2026-06-10 04:40 UTC | selftests/bpf: correct CONFIG_PPC64 macro name in comment | 2 | enelsonmoore@gmail.com | finished in 2h8m0s |
| 2026-06-10 02:46 UTC | bpf: Fix use-after-free on mm_struct in bpf_find_vma() | 4 | sanghyun.park.cnu@gmail.com | finished in 2h52m0s |
| 2026-06-09 18:39 UTC | bpf, sockmap: fix integer overflow in bpf_msg_pop_data() bounds check | 1 | rhkrqnwk98@gmail.com | finished in 4h23m0s |
| 2026-06-09 18:21 UTC | perf annotate: Add elfutils libasm disassembler and BPF JIT disassembly support | 3 | irogers@google.com | finished in 1h50m0s |
| 2026-06-09 17:20 UTC | bpf: Add BPF_FIB_LOOKUP_VLAN flag to bpf_fib_lookup() helper | 1 | avinash.duduskar@gmail.com | finished in 4h21m0s |
| 2026-06-09 14:55 UTC | bpf: Reject scalar addition from untrusted memory | 1 | gnq25@mails.tsinghua.edu.cn | finished in 4h19m0s |
| 2026-06-09 13:55 UTC | bpf, lpm_trie: Allow sleepable BPF programs to use LPM tries | 2 | vlad.wing@gmail.com | finished in 4h34m0s |
| 2026-06-09 12:52 UTC | bpf: Fix kfunc implicit arg injection and add selftest | 6 | chenyuan_fl@163.com | finished in 4h37m0s |
| 2026-06-09 11:37 UTC | selftests/bpf: Add BTF repeated field count overflow test | 1 | p@1g4.org | finished in 1h25m0s |
| 2026-06-09 10:42 UTC | bpf: Allow uprobe_multi binary specified by file descriptor | 1 | jolsa@kernel.org | finished in 4h46m0s |
| 2026-06-09 08:37 UTC | selftests/bpf: add tests for arena vma split and fork | 3 | linuxoid@gmail.com | finished in 1h29m0s |
| 2026-06-09 07:07 UTC | perf annotate: Add elfutils libasm disassembler support | 2 | irogers@google.com | finished in 1h11m0s |
| 2026-06-09 05:17 UTC | perf annotate: Add elfutils libasm disassembler backend | 1 | irogers@google.com | finished in 1h32m0s |
| 2026-06-09 04:14 UTC | LoongArch: BPF: per-CPU addr MOV and timed may_goto | 1 | dongtai.guo@linux.dev | finished in 1m0s |
| 2026-06-09 03:47 UTC | selftests/bpf: correct CONFIG_PPC64 macro name in comment | 1 | enelsonmoore@gmail.com | finished in 2h30m0s |
| 2026-06-08 14:51 UTC | bpf: Introduce global percpu data | 5 | leon.hwang@linux.dev | finished in 4h37m0s |
| 2026-06-08 14:26 UTC | bpf: Fix kfunc implicit arg injection and add selftest | 5 | chenyuan_fl@163.com | finished in 4h32m0s |
| 2026-06-08 12:58 UTC | bpf: tcp: Fix null-ptr-deref in arbitrary SYN Cookie | 8 | jiayuan.chen@linux.dev | finished in 4h28m0s |
| 2026-06-08 05:00 UTC | bpf: fix NULL pointer dereference in bpf_task_from_vpid() | 4 | rhkrqnwk98@gmail.com | finished in 2h18m0s |
| 2026-06-07 13:24 UTC | Keep dynamic inner array lookups nullable | 2 | gnq25@mails.tsinghua.edu.cn | finished in 4h5m0s |
| 2026-06-06 10:50 UTC | bpf, verifier: fix PTR_TO_FLOW_KEYS constant-offset OOB | 3 | gnq25@mails.tsinghua.edu.cn | finished in 3h57m0s |
| 2026-06-06 09:19 UTC | bpf: fix NULL pointer dereference in bpf_task_from_vpid() | 3 | rhkrqnwk98@gmail.com | finished in 4h1m0s |
| 2026-06-06 02:45 UTC | bpf: Fix signedness bug | 1 | ethantidmore06@gmail.com | finished in 4h8m0s |
| 2026-06-06 02:28 UTC | bpf: defer freeing htab internal structs to workqueue to fix sleep-in-atomic | 1 | luogengkun2@huawei.com | finished in 3h55m0s |
| 2026-06-05 23:43 UTC | bpf: Validate BTF repeated field counts before expansion | 1 | p@1g4.org | finished in 4h9m0s |
| 2026-06-05 20:04 UTC | bpf: fix NULL pointer dereference in bpf_task_from_vpid() | 2 | rhkrqnwk98@gmail.com | finished in 4h55m0s |
| 2026-06-05 15:52 UTC | bpf: Check tail zero of bpf_map_info and bpf_prog_info | 3 | leon.hwang@linux.dev | finished in 4h46m0s |
| 2026-06-05 15:14 UTC | selftests/bpf: Fix test_lirc test | 1 | sean@mess.org | finished in 1h39m0s |
| 2026-06-05 14:57 UTC | bpf: reject sleepable BPF_LSM_CGROUP programs at load time | 1 | dwindsor@gmail.com | finished in 4h37m0s |
| 2026-06-05 11:57 UTC | selftests/bpf: add arena split and fork tests | 2 | linuxoid@gmail.com | finished in 1h11m0s |
| 2026-06-05 11:21 UTC | tcp: restrict SO_ATTACH_FILTER to priv users | 1 | edumazet@google.com | finished in 4h47m0s |
| 2026-06-05 09:41 UTC | bpf: Clear rb node linkage when freeing bpf_rb_root | 2 | kaitao.cheng@linux.dev | finished in 4h46m0s |
| 2026-06-05 07:58 UTC | bpf/selftests: remove lirc test | 1 | bastien.curutchet@bootlin.com | finished in 1h35m0s |
| 2026-06-05 05:41 UTC | Refcounted interrupt disable and SpinLockIrq for rust (Part 1) | 3 | boqun@kernel.org | finished in 4h6m0s |
| 2026-06-04 20:21 UTC | bpf: add support for KASAN checks in JITed programs | 2 | alexis.lothore@bootlin.com | finished in 4h50m0s |
| 2026-06-04 18:07 UTC | bpf, verifier: fix PTR_TO_FLOW_KEYS constant-offset OOB | 2 | gnq25@mails.tsinghua.edu.cn |
finished
in 1h24m0s
[1 findings] |
| 2026-06-04 15:23 UTC | selftests/bpf: Add arena direct-value one-past-end reject test | 2 | random6.xyz@gmail.com | finished in 1h27m0s |
| 2026-06-04 15:11 UTC | Keep dynamic inner array lookups nullable | 1 | gnq25@mails.tsinghua.edu.cn | finished in 4h24m0s |
| 2026-06-04 15:07 UTC | bpf, verifier: fix PTR_TO_FLOW_KEYS constant-offset OOB | 1 | gnq25@mails.tsinghua.edu.cn | finished in 4h48m0s |
| 2026-06-04 15:05 UTC | bpf: Check tail zero of bpf_map_info and bpf_prog_info | 2 | leon.hwang@linux.dev | finished in 4h52m0s |
| 2026-06-04 07:03 UTC | bpf: Tighten cgroup storage cookie checks for prog arrays | 4 | malin89@huawei.com | finished in 1h17m0s |
| 2026-06-04 00:57 UTC | bpf: Tighten cgroup storage cookie checks for prog arrays | 3 | malin89@huawei.com | finished in 1h8m0s |
| 2026-06-03 20:42 UTC | bpf: fix NULL pointer dereference in bpf_task_from_vpid() | 1 | rhkrqnwk98@gmail.com | finished in 4h31m0s |
| 2026-06-03 20:18 UTC | bpf: clean up btf_scan_decl_tags() | 1 | mattbobrowski@google.com | finished in 5h21m0s |
| 2026-06-03 17:39 UTC | bpftool: Make the LLVM disassembler an optional runtime dependency | 1 | devnull@kernel.org | finished in 1h7m0s |
| 2026-06-03 14:45 UTC | bpf: Check tail zero of bpf_map_info and bpf_prog_info | 1 | leon.hwang@linux.dev | finished in 5h15m0s |
| 2026-06-03 12:09 UTC | selftests/bpf: Add arena direct-value one-past-end reject test | 1 | random6.xyz@gmail.com | finished in 1h18m0s |
| 2026-06-03 10:53 UTC | bpf: fix sysctl new-value handling in __cgroup_bpf_run_filter_sysctl | 3 | dawei.feng@seu.edu.cn | finished in 1h19m0s |
| 2026-06-03 10:04 UTC | LoongArch bpf kptr xchg inline support | 2 | zhaochenguang@kylinos.cn | finished in 1h7m0s |
| 2026-06-03 09:44 UTC | selftests/bpf: add test for arena vma split and fork rejection | 1 | linuxoid@gmail.com | finished in 58m0s |
| 2026-06-03 09:19 UTC | btf: reject to register duplicated kfunc | 5 | chensong_2000@126.com | finished in 4h16m0s |
| 2026-06-03 00:33 UTC | bpftool: Use libbpf error code for flow dissector query | 2 | random6.xyz@gmail.com | finished in 1h1m0s |
| 2026-06-02 20:58 UTC | RISC-V JIT support for bpf_get_current_task/_btf | 1 | varunrmallya@gmail.com | finished in 1h18m0s |
| 2026-06-02 17:03 UTC | bpftool: Use libbpf error code for flow dissector query | 1 | random6.xyz@gmail.com | finished in 1h51m0s |
| 2026-06-02 15:09 UTC | bpf: Update transport_header when encapsulating UDP tunnel in lwt | 4 | leon.hwang@linux.dev | finished in 5h0m0s |
| 2026-06-02 14:47 UTC | tools build: bpf: Append EXTRA_CFLAGS and HOST_EXTRACFLAGS | 2 | leo.yan@arm.com | finished in 1h52m0s |
| 2026-06-02 13:02 UTC | selftests/bpf: Tolerate partial builds across kernel configs | 12 | rbm@suse.com | finished in 1h9m0s |
| 2026-06-02 11:07 UTC | btf: reject to register duplicated kfunc | 4 | chensong_2000@126.com | finished in 4h22m0s |
| 2026-06-02 09:38 UTC | bpf: Fix kfunc implicit arg injection and add selftest | 4 | chenyuan_fl@163.com |
finished
in 1h29m0s
[1 findings] |
| 2026-06-02 08:58 UTC | bpf: Fix kfunc implicit arg injection and add selftest | 3 | chenyuan_fl@163.com |
finished
in 1h19m0s
[1 findings] |
| 2026-06-02 08:43 UTC | bpf: devmap: reject fragmented frames in clone-based broadcasts | 2 | n05ec@lzu.edu.cn | finished in 4h21m0s |
| 2026-06-02 07:35 UTC | bpf: Tighten cgroup storage cookie checks for prog arrays | 2 | malin89@huawei.com | finished in 1h43m0s |
| 2026-06-02 02:52 UTC | bpf: fix UAF by restoring RCU-delayed inode freeing in bpffs | 2 | kartikey406@gmail.com | finished in 4h12m0s |
| 2026-06-02 02:15 UTC | LoongArch: bpf: Support kptr xchg inline | 1 | zhaochenguang@kylinos.cn | finished in 1h15m0s |
| 2026-06-01 22:17 UTC | resolve_btfids: Implement BTF tags emission for kfuncs | 1 | ihor.solodrai@linux.dev | finished in 1h44m0s |
| 2026-06-01 15:02 UTC | bpf: Update transport_header when encapsulating UDP tunnel in lwt | 3 | leon.hwang@linux.dev | finished in 4h59m0s |
| 2026-06-01 09:51 UTC | bpf: Tighten cgroup storage cookie checks for prog arrays | 1 | malin89@huawei.com | finished in 2h5m0s |
| 2026-06-01 06:46 UTC | bpf: Fix kfunc implicit arg injection and add selftest | 2 | chenyuan_fl@163.com | finished in 4h24m0s |