Bradley MorganandAlexei Starovoitov 12091470c6 bpf: Disable xfrm_decode_session hook attachment ...

BPF LSM programs can currently attach to xfrm_decode_session(). That
hook may return an error, but security_skb_classify_flow() calls it
from a void path and triggers BUG_ON() if an error is returned.

Disable BPF attachment to the hook to prevent a BPF LSM program from
turning packet classification into a full panic.

Fixes: 9e4e01dfd3 ("bpf: lsm: Implement attach, detach and execution")
Signed-off-by: Bradley Morgan <include@grrlz.net>
Link: https://lore.kernel.org/r/20260619130305.27779-1-include@grrlz.net
Signed-off-by: Alexei Starovoitov <ast@kernel.org>

2026-06-22 20:08:37 -07:00

..

preload

…

arena.c

Merge tag 'mm-stable-2026-06-18-09-26' of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm

2026-06-19 10:14:34 -07:00

arraymap.c

bpf: Cancel special fields on map value recycle

2026-06-09 21:23:11 -07:00

backtrack.c

bpf: Add precision marking and backtracking for stack argument slots

2026-05-13 09:27:30 -07:00

bloom_filter.c

bpf: Lose const-ness of map in map_check_btf()

2026-02-27 15:39:00 -08:00

bpf_cgrp_storage.c

bpf: Remove gfp_flags plumbing from bpf_local_storage_update()

2026-04-10 21:22:32 -07:00

bpf_inode_storage.c

bpf: Remove gfp_flags plumbing from bpf_local_storage_update()

2026-04-10 21:22:32 -07:00

bpf_insn_array.c

bpf: Lose const-ness of map in map_check_btf()

2026-02-27 15:39:00 -08:00

bpf_iter.c

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

bpf_local_storage.c

bpf: Remove gfp_flags plumbing from bpf_local_storage_update()

2026-04-10 21:22:32 -07:00

bpf_lru_list.c

bpf: Fix NMI/tracepoint re-entry deadlock on lru locks

2026-06-07 18:46:13 -07:00

bpf_lru_list.h

bpf: Fix NMI/tracepoint re-entry deadlock on lru locks

2026-06-07 18:46:13 -07:00

bpf_lsm_proto.c

…

bpf_lsm.c

bpf: Disable xfrm_decode_session hook attachment

2026-06-22 20:08:37 -07:00

bpf_struct_ops.c

bpf: Add struct bpf_tramp_node object

2026-06-07 10:03:01 -07:00

bpf_task_storage.c

bpf: Remove gfp_flags plumbing from bpf_local_storage_update()

2026-04-10 21:22:32 -07:00

btf_iter.c

…

btf_relocate.c

…

btf.c

bpf: Allow type tag BTF records to succeed other modifier records

2026-06-21 17:59:44 -07:00

cfg.c

bpf: Check global subprog exception paths

2026-05-17 11:15:05 -07:00

cgroup_iter.c

…

cgroup.c

bpf: Fix effective prog array index with BPF_F_PREORDER

2026-06-21 18:10:04 -07:00

check_btf.c

bpf: Move BTF checking logic into check_btf.c

2026-04-12 12:37:04 -07:00

cnum_defs.h

bpf: Export cnum_umin/umax() helpers for netronome driver

2026-04-27 10:09:48 -07:00

cnum.c

bpf: representation and basic operations on circular numbers

2026-04-24 18:14:17 -07:00

const_fold.c

bpf: Extend liveness analysis to track stack argument slots

2026-05-13 09:27:31 -07:00

core.c

bpf: Tighten cgroup storage cookie checks for prog arrays

2026-06-10 16:16:46 -07:00

cpumap.c

bpf: Add missing XDP_ABORTED handling in cpumap

2026-03-03 08:37:21 -08:00

cpumask.c

…

crypto.c

Convert 'alloc_obj' family to use the new default GFP_KERNEL argument

2026-02-21 17:09:51 -08:00

devmap.c

bpf: Run generic devmap egress prog on private skb

2026-06-12 18:21:01 -07:00

disasm.c

…

disasm.h

…

dispatcher.c

…

dmabuf_iter.c

…

fixups.c

bpf: Add support for tracing_multi link session

2026-06-07 10:03:01 -07:00

hashtab.c

bpf: Cancel special fields on map value recycle

2026-06-09 21:23:11 -07:00

helpers.c

Merge tag 'mm-nonmm-stable-2026-06-21-10-22' of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm

2026-06-21 13:20:19 -07:00

inode.c

Merge tag 'bpf-next-7.2' of git://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf-next

2026-06-17 09:18:14 +01:00

Kconfig

…

kmem_cache_iter.c

…

link_iter.c

…

liveness.c

bpf: Fix arg_track_join log to use sa prefix for stack arg slots

2026-05-16 17:46:16 -07:00

local_storage.c

bpf: fix end-of-list detection in cgroup_storage_get_next_key()

2026-04-05 18:45:05 -07:00

log.c

bpf: Refactor object relationship tracking and fix dynptr UAF bug

2026-06-01 18:31:41 -07:00

lpm_trie.c

bpf: Allow LPM map access from sleepable BPF programs

2026-06-09 12:42:22 -07:00

Makefile

bpf: representation and basic operations on circular numbers

2026-04-24 18:14:17 -07:00

map_in_map.c

bpf: Reject exclusive maps as inner maps in map-in-map

2026-06-01 18:36:40 -07:00

map_in_map.h

…

map_iter.c

bpf: Implement iteration ops for resizable hashtab

2026-06-05 08:00:08 -07:00

memalloc.c

bpf: Retire rcu_trace_implies_rcu_gp()

2026-04-07 12:24:49 -07:00

mmap_unlock_work.h

…

mprog.c

…

net_namespace.c

treewide: Replace kmalloc with kmalloc_obj for non-scalar types

2026-02-21 01:02:28 -08:00

offload.c

bpf: Fix use-after-free in offloaded map/prog info fill

2026-04-09 13:24:32 -07:00

percpu_freelist.c

…

percpu_freelist.h

…

prog_iter.c

…

queue_stack_maps.c

…

range_tree.c

…

range_tree.h

…

relo_core.c

…

reuseport_array.c

…

ringbuf.c

…

rqspinlock.c

Merge tag 'mm-nonmm-stable-2026-02-12-10-48' of git://git.kernel.org/pub/scm/linux/kernel/git/akpm/mm

2026-02-12 12:13:01 -08:00

rqspinlock.h

…

stackmap.c

bpf: Fix build_id caching in stack_map_get_build_id_offset()

2026-06-21 17:58:14 -07:00

states.c

bpf: Preserve pointer spill metadata during half-slot cleanup

2026-06-22 13:39:34 -07:00

stream.c

bpf: Add bpf_stream_print_stack stack dumping kfunc

2026-02-03 10:41:16 -08:00

syscall.c

bpf: Fix BPF_PROG_ASSOC_STRUCT_OPS last field check

2026-06-21 18:09:07 -07:00

sysfs_btf.c

…

task_iter.c

bpf: return VMA snapshot from task_vma iterator

2026-04-10 12:05:16 -07:00

tcx.c

treewide: Replace kmalloc with kmalloc_obj for non-scalar types

2026-02-21 01:02:28 -08:00

tnum.c

bpf: Simplify tnum_step()

2026-03-24 08:45:29 -07:00

token.c

treewide: Replace kmalloc with kmalloc_obj for non-scalar types

2026-02-21 01:02:28 -08:00

trampoline.c

bpf: Add support for tracing_multi link session

2026-06-07 10:03:01 -07:00

verifier.c

bpf: Reset register bounds before narrowing retval range in check_mem_access()

2026-06-22 17:11:46 -07:00