From: Martin KaFai Lau Date: Tue, 30 Apr 2024 17:43:38 +0000 (-0700) Subject: Merge branch 'bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_C... X-Git-Tag: v6.10-rc1~119^2~31^2 X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=3e9bc0472b910d4115e16e9c2d684c7757cb6c60;p=thirdparty%2Fkernel%2Fstable.git Merge branch 'bpf: Add BPF_PROG_TYPE_CGROUP_SKB attach type enforcement in BPF_LINK_CREATE' Stanislav Fomichev says: ==================== Syzkaller found a case where it's possible to attach cgroup_skb program to the sockopt hooks. Apparently it's currently possible to do that, but only when using BPF_LINK_CREATE API. The first patch in the series has more info on why that happens. ==================== Signed-off-by: Martin KaFai Lau --- 3e9bc0472b910d4115e16e9c2d684c7757cb6c60