Re: [PATCH bpf] bpf: Disallow bpf_{g,s}etsockopt() in cgroup UNIX getname hooks
| Newsgroups | org.kernel.vger.bpf,org.kernel.vger.netdev |
|---|---|
| Message-ID | <178695840740.1036045.289178403447627477.git-patchwork-notify@kernel.org> |
Hello: This patch was applied to bpf/bpf-next.git (master) by Daniel Borkmann <[email protected]>: On Wed, 12 Aug 2026 18:16:54 +0900 you wrote: > _bpf_setsockopt() and _bpf_getsockopt() call sock_owned_by_me() for > full sockets, so these helpers expect the socket lock to be held. > > BPF_CGROUP_UNIX_GETPEERNAME and BPF_CGROUP_UNIX_GETSOCKNAME run BPF > programs without acquiring the socket lock. A program attached to > either hook can therefore trigger the sock_owned_by_me() warning by > calling bpf_setsockopt() or bpf_getsockopt(). > > [...] Here is the summary with links: - [bpf] bpf: Disallow bpf_{g,s}etsockopt() in cgroup UNIX getname hooks https://git.kernel.org/bpf/bpf-next/c/84473a7e1813 You are awesome, thank you! -- Deet-doot-dot, I am a bot. https://korg.docs.kernel.org/patchwork/pwbot.html