Re: [PATCH v3 sched_ext/for-7.3 34/36] sched_ext: Add scx_bpf_sub_kill() to evict a child sub-scheduler
Tejun Heo <[email protected]>
| Newsgroups | dev.linux.lists.sched-ext,org.kernel.vger.linux-kernel |
|---|---|
| Message-ID | <[email protected]> |
On Tue, 07 Jul 2026 00:42:47 +0000, [email protected] wrote: > - [High] The `fmt` argument in the newly added `scx_bpf_sub_kill_bstr` kfunc lacks the `__str` suffix, bypassing the BPF verifier's constant string checks and allowing a malicious BPF program to trigger an out-of-bounds read. This follows the established _bstr kfunc convention: the fmt / data / data__sz triple is exactly how the other scx *_bstr kfuncs are declared and verified. Same as the v2 round. No change. Thanks. -- tejun