]> git.ipfire.org Git - thirdparty/linux.git/commit
bpf: Fix security_bpf_prog_load() error handling
authorPaul Moore <paul@paul-moore.com>
Sat, 23 May 2026 16:00:26 +0000 (12:00 -0400)
committerAlexei Starovoitov <ast@kernel.org>
Mon, 1 Jun 2026 01:40:01 +0000 (18:40 -0700)
commit868d43cf8f970b456fd93334bee40f792cf27e4d
tree45632a1f13191b9e3b3cfedab6b630c233585032
parentde36adca634634c205a9eb8b56a28175ab7abf5f
bpf: Fix security_bpf_prog_load() error handling

If security_bpf_prog_load() fails there is no need to call into
security_bpf_prog_free() as the LSM will handle the cleanup of any partial
LSM state before returning to the caller with an error.  Thankfully this
isn't an issue with any of the existing code as the LSMs which currently
provide BPF hook callback implementations don't allocate any internal
state, but this is something we want to fix for potential future users.

Signed-off-by: Paul Moore <paul@paul-moore.com>
Link: https://lore.kernel.org/r/20260523160025.16363-2-paul@paul-moore.com
Signed-off-by: Alexei Starovoitov <ast@kernel.org>
kernel/bpf/syscall.c