Subject bpf: Fix use-after-free of progs detached from busy trampolines
Author florent.revest@linux.dev
Date 2026-09-25 10:03:30 +0000 UTC
Version
Cc andrii@kernel.org ast@kernel.org bjorn@kernel.org bpf@vger.kernel.org chleroy@kernel.org daniel@iogearbox.net eddyz87@gmail.com florent.revest@linux.dev hbathini@linux.ibm.com hengqi.chen@gmail.com iii@linux.ibm.com john.fastabend@gmail.com jolsa@kernel.org kpsingh@kernel.org leon.hwang@linux.dev linux-kernel@vger.kernel.org martin.lau@linux.dev memxor@gmail.com naveen@kernel.org pulehui@huawei.com puranjay@kernel.org rhkrqnwk98@gmail.com song@kernel.org xukuohai@huaweicloud.com yangtiezhu@loongson.cn yonghong.song@linux.dev zirajs7@gmail.com
Patches (3)
Name Content [All]
[PATCH bpf v4 1/3] bpf: Wait for an RCU tasks grace period before freeing trampoline progs [Body]
[PATCH bpf v4 2/3] bpf: Skip detached progs in trampoline images that are still in use [Body]
[PATCH bpf v4 3/3] selftests/bpf: Detach a trampoline prog while a task sleeps before it [Body]
Series Summary
Passed
✓ All tests passed. No findings.
Sessions
Session 2026-09-25
Passed
ID (for dev) ece78841-c5c6-43c3-bf4d-271ef1326267
Status finished
Triaged OK [Log] [Trajectory]
Execution Log [Link]
Test Base Patched Verdict
[KASAN] Build Base 5fc5768c7ca92895ccd1de94dc521e5a55ae7896 [Config] passed [Log]
[KASAN] Boot test: Base 5fc5768c7ca92895ccd1de94dc521e5a55ae7896 [Config] passed [Log]
[KASAN] Build Patched 5fc5768c7ca92895ccd1de94dc521e5a55ae7896 [Config] [patched] passed [Log]
[KASAN] Boot test: Patched 5fc5768c7ca92895ccd1de94dc521e5a55ae7896 [Config] [patched] passed [Log]
[KASAN] Fuzz 5fc5768c7ca92895ccd1de94dc521e5a55ae7896 [Config] 5fc5768c7ca92895ccd1de94dc521e5a55ae7896 [Config] [patched] passed [Log] [Artifacts]