Subject bpf: Fix two trampoline image UAFs in bpf_trampoline_multi_detach()
Author hui.zhu@linux.dev
Date 2026-07-16 08:43:38 +0000 UTC
Version
Cc andrii@kernel.org ast@kernel.org bpf@vger.kernel.org daniel@iogearbox.net eddyz87@gmail.com emil@etsalapatis.com hui.zhu@linux.dev john.fastabend@gmail.com jolsa@kernel.org linux-kernel@vger.kernel.org martin.lau@linux.dev memxor@gmail.com song@kernel.org yonghong.song@linux.dev zhuhui@kylinos.cn
Patches (2)
Name Content [All]
[PATCH bpf-next 1/2] bpf: Fix stale old_image UAF on trampoline update failure [Body]
[PATCH bpf-next 2/2] bpf: Fix UAF in bpf_trampoline_multi_detach when ftrace update fails [Body]
Session 2026-07-16
ID (for dev) 45f40bcb-161e-4729-9648-cae1c08e78e8
Status finished
Triaged OK [Log] [Trajectory]
Execution Log [Link]
Test Base Patched Verdict
[KASAN] Build Base d1f4b56417a3dc1a0600f960b14f46bd25eda89d [Config] passed [Log]
[KASAN] Boot test: Base d1f4b56417a3dc1a0600f960b14f46bd25eda89d [Config] passed [Log]
[KASAN] Build Patched d1f4b56417a3dc1a0600f960b14f46bd25eda89d [Config] [patched] passed [Log]
[KASAN] Boot test: Patched d1f4b56417a3dc1a0600f960b14f46bd25eda89d [Config] [patched] passed [Log]
[KASAN] Fuzz d1f4b56417a3dc1a0600f960b14f46bd25eda89d [Config] d1f4b56417a3dc1a0600f960b14f46bd25eda89d [Config] [patched] skipped [Log] [Artifacts]