linux/arch/x86
Linus Torvalds 2beb1b31a1 bpf-fixes
-----BEGIN PGP SIGNATURE-----
 
 iQIzBAABCAAdFiEE+soXsSLHKoYyzcli6rmadz2vbToFAmqdhRMACgkQ6rmadz2v
 bTo8vRAAnP+x1z6FBOgHawGmmBpXtazoipRFeok/+/YGQ4SbS+evvFNvmkeCyihZ
 7EeNHGuWEbA6xQBAcMf0StMjmr3jkJvUA6lsHSxBiFLpHGqNt0Fz9IXvAL/8QWPg
 F7+CBs5A+J61i66LEmINbWzW1ujDf7baU/1VWui9zfPxnmPu40V/74eXzm6DmH/V
 oHTsCscCYNe+N+Wix6B6nLrObY537fcJU12N56uqpkaSc0+6H1fBQJmyFGpYroTX
 +4g+DNzEHyIYmt6B3+oDpbT0Zh/pP6ROq5TPDNJSSa+5B/uPo5C5pH520HwXF9hJ
 04uaD7y2fpE809Nwl3OEK4ozpJ+mEGU1NKZPvFAxckY6GCiBtfbGd1etFno7r+4F
 mZhNBKbQVEQX4XJUlcoqn9n7T2OCDnjiuneZAjIi4vUdevnSnakr0rCTFriiHP54
 jg4fEkXxvYjPiqs5SQbxoGxmYSfg9fYaSfK4HgFdlfbwp+3Vmv4BW/tcsIJ9dcPs
 L3YWkUU3znjbu2BLy0CP9fGt/1ik8p4/tA8vvZwz0yqpDMJkLy1TziGMef51UQ7k
 1Pe/Ln5J3C6xnWs+3TRF11y8PuuCF0y47DGPACfwPoQxca1ufJ5fgmLXRRQToZe4
 RjDmoeQvvI9w9kxh6gVhTHoiiEeD0wcQqx2CMHKTrU/PbM7d4Co=
 =oz4Z
 -----END PGP SIGNATURE-----

Merge tag 'bpf-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf

Pull bpf fixes from Alexei Starovoitov:
 "This mainly contains verifier fixes that address bugs reported by
  Nicholas Carlini.

   - Fix incorrect non-NULL inference in pointer comparisons: pointer
     types that may be NULL at runtime, pointers with unbounded offsets,
     JMP32 comparisons with zero, and imprecise zero registers (Eduard
     Zingerman)

   - Fix precision tracking for half-dead zero spills, ld_abs/ld_ind
     implicit subprog exit, bpf_loop() callbacks, linked scalar ids and
     NULL call arguments (Eduard Zingerman)

   - Reject BPF_PSEUDO_FUNC reference to the main program, fix zero
     extension of arena 32-bit cmpxchg, don't rewrite bpf_fastcall
     patterns entered by a jump (Eduard Zingerman)

   - Fix percpu map update and BPF_F_CPU validation with sparse CPU IDs
     (Hui Su)

   - Fix NULL-ptr-derefs in bpf_snprintf_btf() for void and VAR types,
     and reject key-less BTF for hash maps (Jiayuan Chen)

   - Various fixes (Kumar Kartikeya Dwivedi):
       - Fix out-of-bounds access in disassembler on invalid LDSX
         instruction
       - mark siginfo of signal tracepoints as scalar and
         sched_process_wait argument as nullable
       - mark faultable stack helpers as sleepable
       - reject tail calls and legacy packet loads from callbacks
       - enforce rbtree callback lock restrictions for resilient locks
       - require MEM_PERCPU for percpu kptr stores
       - clear NON_OWN_REF after RCU protection ends
       - mark NULL kptr stores precise
       - preserve inner map identity in callback frames
       - reject non-scalar bpf_loop() iteration counts

   - Fix trampoline allocation slowdown on x86 by using
     EXECMEM_MODULE_DATA (Mike Rapoport)

   - Keep bpf_refcount_acquire() nullable for borrowed RCU kptrs and
     reject untrusted allocated-object pointers (Ning Ding)

   - Fix special fields handling in recycled rhtab elements (Nuoqi Gui,
     Yuan Chen)"

* tag 'bpf-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf: (86 commits)
  bpf, riscv: Make arena support depend on ZACAS
  selftests/bpf: Test pointer bpf_loop iteration count rejection
  bpf: Reject non-scalar bpf_loop iteration counts
  bpf: use mark_arg_precision() in check_mem_size_reg()
  bpf: propagate mark_chain_precision() errors out of loop_flag_is_zero()
  selftests/bpf: precision of a NULL global subprogram BTF_ID argument
  bpf: mark a NULL BTF_ID argument of a global subprogram precise
  selftests/bpf: precision of a NULL kfunc argument
  bpf: mark a NULL kfunc argument precise
  selftests/bpf: precision of a NULL global subprogram memory argument
  bpf: mark a NULL memory argument of a call precise
  selftests/bpf: precision of a NULL helper argument
  bpf: mark a NULL call argument precise
  selftests/bpf: Test inner map identities in callbacks
  bpf: Preserve inner map identity in callback frames
  selftests/bpf: Test imprecise scalar kptr stores
  bpf: Mark NULL kptr stores precise
  selftests/bpf: Test rhtab kptr cancellation semantics
  bpf: Cancel special fields when recycling rhtab elements
  selftests/bpf: Test timer field on recycled rhtab element
  ...
2026-09-06 13:49:44 -07:00
..
boot kho: make boot time huge page allocation work nicely with KHO 2026-08-23 09:17:38 -07:00
coco * Fix TDX port I/O bugs 2026-08-18 17:41:36 -07:00
configs x86/64/defconfig: Add CONFIG_IRQ_REMAP 2026-03-10 19:01:37 +01:00
crypto This update includes the following changes: 2026-04-15 15:22:26 -07:00
entry Fix frame pointer unwinder when it encounters FRED stack frames 2026-08-18 17:38:30 -07:00
events mm.git review status for mm-hotfixes-stable..mm-stable 2026-08-20 18:17:08 -07:00
hyperv hyperv-next for v7.3-rc1 2026-08-26 16:47:40 -07:00
ia32
include Arm: 2026-08-25 11:48:04 -07:00
kernel x86/itmt: Don't make ITMT enablement depend on debugfs 2026-09-02 09:17:50 +02:00
kvm Arm: 2026-08-25 11:48:04 -07:00
lib - Get rid of static_cpu_has() - one less API to care about testing CPU 2026-08-18 19:09:42 -07:00
mm mm.git review status for mm-hotfixes-stable..mm-stable 2026-08-20 18:17:08 -07:00
net x86/bpf: Make arch_bpf_trampoline_size allocate from EXECMEM_MODULE_DATA 2026-08-20 17:52:31 +02:00
pci x86/pci: Stop using 32-bit MSR interfaces 2026-07-02 11:54:52 +02:00
platform platform-drivers-x86 for v7.3-1 2026-08-24 10:16:35 -07:00
power PM: hibernate: x86: Remove inclusion of crypto/hash.h 2026-03-19 16:13:32 +01:00
purgatory x86/purgatory: Return bool from verify_sha256_digest() 2026-07-23 15:45:02 +02:00
realmode x86/realmode: Make the location of the trampoline configurable 2026-05-28 20:01:25 +00:00
tools x86/alternative: Drop smp_locks glue 2026-07-13 09:23:36 -07:00
um Mostly cleanups and small things, notably: 2026-04-20 16:36:46 -07:00
video x86/video: Only fall back to vga_default_device() without screen info 2026-07-07 08:14:55 -07:00
virt mm.git review status for mm-hotfixes-stable..mm-stable 2026-08-20 18:17:08 -07:00
xen * Fix pkey_alloc() return value when pkeys are not supported 2026-08-18 17:44:09 -07:00
.gitignore
Kbuild
Kconfig Bootconfig updates for v7.3: 2026-08-25 08:59:09 -07:00
Kconfig.assembler
Kconfig.cpu - The usual pile of cleanups and fixlets the cat dragged in 2026-06-16 05:41:22 +05:30
Kconfig.cpufeatures x86/cpu: Make CONFIG_X86_CX8 unconditional 2026-06-11 10:25:40 +02:00
Kconfig.debug
Makefile x86/cpu updates for v7.2: 2026-06-15 15:25:17 +05:30
Makefile_32.cpu x86/cpu, cpufreq: Remove AMD ELAN support 2026-05-08 07:34:03 +02:00
Makefile.um rust: kasan/kbuild: fix rustc-option when cross-compiling 2026-05-26 09:44:54 +02:00