Alexei Starovoitov 9336285278 bpf: Fix regsafe() for pointers to packet ...

[ Upstream commit a8502a79e832b861e99218cbd2d8f4312d62e225 ]

In case rold->reg->range == BEYOND_PKT_END && rcur->reg->range == N
regsafe() may return true which may lead to current state with
valid packet range not being explored. Fix the bug.

Fixes: 6d94e741a8ff ("bpf: Support for pointers beyond pkt_end.")
Signed-off-by: Alexei Starovoitov <ast@kernel.org>
Signed-off-by: Andrii Nakryiko <andrii@kernel.org>
Reviewed-by: Daniel Borkmann <daniel@iogearbox.net>
Reviewed-by: Amery Hung <ameryhung@gmail.com>
Acked-by: Eduard Zingerman <eddyz87@gmail.com>
Link: https://lore.kernel.org/bpf/20260331204228.26726-1-alexei.starovoitov@gmail.com
Signed-off-by: Sasha Levin <sashal@kernel.org>
Signed-off-by: Ulrich Hecht <uli@kernel.org>

2026-05-07 10:55:23 +02:00

..

bpf

bpf: Fix regsafe() for pointers to packet

2026-05-07 10:55:23 +02:00

cgroup

cgroup: fix race between task migration and iteration

2026-05-07 10:55:15 +02:00

configs

…

debug

…

dma

…

events

…

gcov

…

irq

…

livepatch

…

locking

locking/spinlock/debug: Fix data-race in do_raw_write_lock

2026-01-26 16:51:54 +08:00

power

…

printk

…

rcu

…

sched

sched: idle: Make skipping governor callbacks more consistent

2026-05-07 10:55:15 +02:00

time

alarmtimer: Fix argument order in alarm_timer_forward()

2026-05-07 10:55:21 +02:00

trace

tracing: Fix syscall events activation by ensuring refcount hits zero

2026-05-07 10:55:18 +02:00

.gitignore

…

acct.c

…

async.c

…

audit_fsnotify.c

…

audit_tree.c

…

audit_watch.c

…

audit.c

…

audit.h

…

auditfilter.c

…

auditsc.c

…

backtracetest.c

…

bounds.c

…

capability.c

…

compat.c

…

configs.c

…

context_tracking.c

…

cpu_pm.c

…

cpu.c

…

crash_core.c

…

crash_dump.c

…

cred.c

…

delayacct.c

…

dma.c

…

exec_domain.c

…

exit.c

…

extable.c

…

fail_function.c

…

fork.c

unshare: fix unshare_fs() handling

2026-05-07 10:55:14 +02:00

freezer.c

…

futex.c

…

groups.c

…

hung_task.c

…

iomem.c

…

irq_work.c

…

jump_label.c

…

kallsyms.c

…

kcmp.c

…

Kconfig.freezer

…

Kconfig.hz

…

Kconfig.locks

…

Kconfig.preempt

…

kcov.c

…

kexec_core.c

…

kexec_file.c

kexec: derive purgatory entry from symbol

2026-04-12 13:56:51 +08:00

kexec_internal.h

…

kexec.c

…

kmod.c

…

kprobes.c

…

ksysfs.c

…

kthread.c

…

latencytop.c

…

Makefile

…

memremap.c

…

module_signing.c

…

module-internal.h

…

module.c

…

notifier.c

…

nsproxy.c

…

padata.c

…

panic.c

…

params.c

…

pid_namespace.c

…

pid.c

…

profile.c

…

ptrace.c

…

range.c

…

reboot.c

…

relay.c

…

resource.c

…

rseq.c

…

seccomp.c

…

signal.c

…

smp.c

…

smpboot.c

…

smpboot.h

…

softirq.c

…

stacktrace.c

…

stop_machine.c

…

sys_ni.c

…

sys.c

…

sysctl_binary.c

…

sysctl.c

sysctl: fix uninitialized variable in proc_do_large_bitmap

2026-05-07 10:55:21 +02:00

task_work.c

…

taskstats.c

…

test_kprobes.c

…

torture.c

…

tracepoint.c

…

tsacct.c

…

ucount.c

ucount: check for CAP_SYS_RESOURCE using ns_capable_noaudit()

2026-04-09 14:44:45 +08:00

uid16.c

…

uid16.h

…

umh.c

…

up.c

…

user_namespace.c

…

user-return-notifier.c

…

user.c

…

utsname_sysctl.c

…

utsname.c

…

watchdog_hld.c

…

watchdog.c

…

workqueue_internal.h

…

workqueue.c

…