Emil Tsalapatis 4a4852376e bpf: Fix bpf_sock context code generation ... Currently, the ctx access code reads the rx_queue_mapping field with either a 4-byte or 2-byte load. The rest of the bits in the register are marked known zero by the verifier. However, the emitted ctx access code places in the register on certain the special value (-1) using BPF_MOV_IMM64, which gets sign-extended to turn on all the bits in the register. By shifting this value right, the program ends up with a value at runtime above what the verifier assumes is possible. Fix this by ensuring the read value is as wide as the assumed size. Use MOV32 instructions instead of MOV64 instructions to keep the upper bits zero as assumed by the verifier. Also properly report the size of the destination variable (the bpf_sock field, 4 bytes) instead of the source (the socket field, 2 bytes). Fixes: c3c16f2ea6 ("bpf: Add rx_queue_mapping to bpf_sock") Reported-by: Nicholas Carlini <nicholas@carlini.com> Suggested-by: Nicholas Carlini <nicholas@carlini.com> Signed-off-by: Emil Tsalapatis <emil@etsalapatis.com> Signed-off-by: Alexei Starovoitov <ast@kernel.org> Reviewed-by: Jiayuan Chen <jiayuan.chen@linux.dev> Link: https://patch.msgid.link/20260922172028.6269-4-emil@etsalapatis.com		2026-09-22 19:34:04 +00:00
..
6lowpan	net: Use helpers to get/set UDP len tree-wide	2026-07-22 13:47:02 +02:00
9p	9p: Add missing read barrier in virtio zero-copy path	2026-06-21 05:22:57 +00:00
802	appletalk: move the protocol out of tree	2026-06-16 14:37:06 -07:00
8021q	vlan: fix skb_under_panic and races when toggling HW VLAN offload	2026-08-20 13:05:43 -07:00
atm	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2026-08-06 11:53:47 -07:00
batman-adv	treewide: refresh kmalloc_obj() conversions	2026-09-04 21:37:00 -07:00
bluetooth	treewide: refresh kmalloc_obj() conversions	2026-09-04 21:37:00 -07:00
bpf	bpf: Use kvfree() in xdp_test_run_teardown()	2026-09-12 12:11:41 -07:00
bridge	net: bridge: mcast: don't truncate the port group walk on teardown	2026-09-02 18:25:35 -07:00
can	can: isotp: check register_netdevice_notifier() error in module init	2026-07-29 11:26:41 +02:00
ceph	libceph: remove pinning assertion in ceph_msg_data_iter_next()	2026-09-02 12:23:05 +02:00
core	bpf: Fix bpf_sock context code generation	2026-09-22 19:34:04 +00:00
dcb
devlink	treewide: refresh kmalloc_obj() conversions	2026-09-04 21:37:00 -07:00
dns_resolver	keys, dns: Drop unused NUL terminator from upayload->data	2026-08-10 16:20:42 -07:00
dsa	net: dsa: initial MT7628 tagging driver	2026-08-18 15:50:13 +02:00
ethernet
ethtool	ethtool: tsconfig: reject zero-valued tx_type and rx_filter bitsets	2026-08-13 17:44:54 -07:00
handshake	handshake: Require admin permission for DONE command	2026-06-12 15:45:44 -07:00
hsr	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2026-08-18 10:42:41 -07:00
ieee802154	ieee802154: convert dgram getsockopt to sockopt_t	2026-08-03 16:55:23 -07:00
ife	net/sched: act_ife: Only operate on Ethernet frames	2026-08-24 11:59:59 -07:00
ipv4	tcp: Skip cond_resched() in inet_csk_listen_stop() under BPF context	2026-09-10 16:58:40 -07:00
ipv6	net: gro: Fix nesting of TCP GSO SKBs in skb_gro_receive_list()	2026-09-03 12:20:38 +02:00
iucv	net/iucv: fix the recvmsg window update	2026-08-31 15:51:22 -07:00
kcm	net: kcm: Hold RCU read lock while running BPF parser	2026-08-17 13:43:58 -07:00
key	ipsec-2026-06-22	2026-06-23 16:22:24 -07:00
l2tp	net: l2tp: do not propagate multicast notification errors	2026-08-24 11:43:28 -07:00
l3mdev
lapb
llc	llc: fix SAP refcount leak when creating incoming sockets	2026-07-17 13:17:46 +02:00
mac80211	treewide: refresh kmalloc_obj() conversions	2026-09-04 21:37:00 -07:00
mac802154	mac802154: fix data race and NULL deref on local->assoc_dev	2026-09-01 11:12:39 +02:00
mctp	treewide: refresh kmalloc_obj() conversions	2026-09-04 21:37:00 -07:00
mpls	Summary	2026-08-20 08:46:41 -07:00
mptcp	tcp: use GFP_ATOMIC in tcp_send_active_reset()	2026-08-28 15:35:38 -07:00
ncsi	net/ncsi: fix heap OOB read in NCSI_CMD_SEND_CMD payload length	2026-08-05 17:24:57 -07:00
netfilter	treewide: refresh kmalloc_obj() conversions	2026-09-04 21:37:00 -07:00
netlabel	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2026-06-11 14:33:35 -07:00
netlink	netlink: drop unneeded semicolon	2026-08-05 17:32:34 -07:00
nfc	nfc: nci: free destination parameters when closing a connection	2026-08-11 18:10:04 +02:00
nsh
openvswitch	openvswitch: only skb_tx_error() a packet we are about to drop	2026-08-25 09:36:47 +02:00
packet	af_packet: Don't cast tpacket_hdr.tp_len to int in tpacket_parse_header().	2026-09-01 10:42:56 +02:00
phonet	phonet: pep: convert getsockopt to sockopt_t	2026-08-03 16:55:23 -07:00
psample	net: psample: fix info leak in PSAMPLE_ATTR_DATA	2026-06-17 16:35:50 -07:00
psp	psp: use unrcu_pointer() for the cmpxchg() on netdev psp_dev	2026-08-17 11:06:14 -07:00
qrtr	net: qrtr: Send HELLO message on endpoint register	2026-09-02 12:14:32 +01:00
rds	treewide: refresh kmalloc_obj() conversions	2026-09-04 21:37:00 -07:00
rfkill	Replace <linux/mod_devicetable.h> by more specific <linux/device-id/*.h> (c files)	2026-07-03 07:38:17 +02:00
rxrpc	treewide: refresh kmalloc_obj() conversions	2026-09-04 21:37:00 -07:00
sched	treewide: refresh kmalloc_obj() conversions	2026-09-04 21:37:00 -07:00
sctp	sctp: validate chunk length in the inqueue parser	2026-08-30 14:17:53 -07:00
shaper	net: shaper: add a note that we expect cap dumps to be tiny	2026-06-11 12:55:23 +02:00
smc	Including fixes from Bluetooth, IPSec and Netfilter.	2026-08-27 13:53:43 -07:00
strparser
sunrpc	treewide: refresh kmalloc_obj() conversions	2026-09-04 21:37:00 -07:00
switchdev
tipc	tipc: Dont send random pad bytes in RESET/ACTIVATE messages	2026-08-31 20:02:36 -07:00
tls	tls: device: fix out-of-bounds write in tls_append_frag()	2026-08-25 10:04:02 +02:00
unix	treewide: refresh kmalloc_obj() conversions	2026-09-04 21:37:00 -07:00
vmw_vsock	vsock/vmci: validate packet source for connected sockets	2026-08-31 16:50:54 -07:00
wireless	treewide: refresh kmalloc_obj() conversions	2026-09-04 21:37:00 -07:00
x25	net/x25: fix use-after-free of the socket by its timers	2026-07-30 18:46:45 -07:00
xdp	xsk: Use a 32-bit compare in xsk_map_gen_lookup	2026-09-17 10:56:16 -07:00
xfrm	ipsec-2026-08-18	2026-08-20 11:38:14 -07:00
compat.c	net: af_unix: useful handling of LSM denials on SCM_RIGHTS	2026-08-17 18:14:52 -07:00
devres.c
Kconfig	appletalk: move the protocol out of tree	2026-06-16 14:37:06 -07:00
Kconfig.debug
Makefile	appletalk: move the protocol out of tree	2026-06-16 14:37:06 -07:00
socket.c	Major changes:	2026-08-20 07:36:20 -07:00
sysctl_net.c	net: enforce net sysctl registration	2026-08-13 13:12:21 +02:00