]> git.ipfire.org Git - thirdparty/linux.git/commit
bpf: Limit bpf program signature size
authorKP Singh <kpsingh@kernel.org>
Thu, 5 Feb 2026 06:38:07 +0000 (07:38 +0100)
committerAlexei Starovoitov <ast@kernel.org>
Thu, 5 Feb 2026 16:31:42 +0000 (08:31 -0800)
commitea1535e28bb3773fc0b3cbd1f3842b808016990c
treefa24efbf1b288571c2c85efe22564834fb8c3263
parent75cd3beb64d0977009e3d1a2d0c03715d3e5e156
bpf: Limit bpf program signature size

Practical BPF signatures are significantly smaller than
KMALLOC_MAX_CACHE_SIZE

Allowing larger sizes opens the door for abuse by passing excessive
size values and forcing the kernel into expensive allocation paths (via
kmalloc_large or vmalloc).

Fixes: 349271568303 ("bpf: Implement signature verification for BPF programs")
Reported-by: Chris Mason <clm@meta.com>
Signed-off-by: KP Singh <kpsingh@kernel.org>
Acked-by: Daniel Borkmann <daniel@iogearbox.net>
Link: https://lore.kernel.org/r/20260205063807.690823-1-kpsingh@kernel.org
Signed-off-by: Alexei Starovoitov <ast@kernel.org>
kernel/bpf/syscall.c