lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Message-ID: <20250724173306.3578483-1-martin.lau@linux.dev>
Date: Thu, 24 Jul 2025 10:33:06 -0700
From: Martin KaFai Lau <martin.lau@...ux.dev>
To: David Miller <davem@...emloft.net>,
	Jakub Kicinski <kuba@...nel.org>,
	Eric Dumazet <edumazet@...gle.com>,
	Paolo Abeni <pabeni@...hat.com>
Cc: Alexei Starovoitov <ast@...nel.org>,
	Andrii Nakryiko <andrii@...nel.org>,
	Daniel Borkmann <daniel@...earbox.net>,
	Martin KaFai Lau <martin.lau@...nel.org>,
	netdev@...r.kernel.org,
	bpf@...r.kernel.org
Subject: pull-request: bpf-next 2025-07-24

Hi David, hi Jakub, hi Paolo, hi Eric,

The following pull-request contains BPF updates for your *net-next* tree.

We've added 3 non-merge commits during the last 3 day(s) which contain
a total of 4 files changed, 40 insertions(+), 15 deletions(-).

The main changes are:

1) Improved verifier error message for incorrect narrower load from
   pointer field in ctx, from Paul Chaignon.

2) Disabled migration in nf_hook_run_bpf to address a syzbot report,
   from Kuniyuki Iwashima.

Please consider pulling these changes from:

  git://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-next.git tags/for-netdev

Thanks a lot!

Also thanks to reporters, reviewers and testers of commits in this pull-request:

Eduard Zingerman, Florian Westphal

----------------------------------------------------------------

The following changes since commit dd500e4aecf25e48e874ca7628697969df679493:

  net: usb: Remove duplicate assignments for net->pcpu_stat_type (2025-07-21 10:43:07 +0100)

are available in the Git repository at:

  https://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-next.git tags/for-netdev

for you to fetch changes up to ba578b87fe2beef95b37264f8a98c0b505b93de9:

  selftests/bpf: Test invalid narrower ctx load (2025-07-23 19:35:56 -0700)

----------------------------------------------------------------
bpf-next-for-netdev

----------------------------------------------------------------
Kuniyuki Iwashima (1):
      bpf: Disable migration in nf_hook_run_bpf().

Paul Chaignon (2):
      bpf: Reject narrower access to pointer ctx fields
      selftests/bpf: Test invalid narrower ctx load

 kernel/bpf/cgroup.c                              |  8 ++++----
 net/core/filter.c                                | 20 +++++++++----------
 net/netfilter/nf_bpf_link.c                      |  2 +-
 tools/testing/selftests/bpf/progs/verifier_ctx.c | 25 ++++++++++++++++++++++++
 4 files changed, 40 insertions(+), 15 deletions(-)

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ