Hello:
This series was applied to bpf/bpf-next.git (master)
by Kumar Kartikeya Dwivedi <[email protected]>:
On Fri, 17 Jul 2026 12:53:46 +0000 you wrote:
> bpf_arena_free_pages() can be called with a scalar arena address. The
> runtime reconstructs a full user address from the arena base and the low
> 32 bits before returning the range to the arena free tree. A scalar one
> page below the arena base can otherwise produce an out-of-domain free-tree
> offset and make a later allocation return an address below the arena
> mapping.
>
> [...]
Here is the summary with links:
- [bpf-next,v2,1/2] bpf: Reject arena frees below the arena base
https://git.kernel.org/bpf/bpf-next/c/b5a71cb2db6d
- [bpf-next,v2,2/2] selftests/bpf: Cover scalar arena frees below the base
https://git.kernel.org/bpf/bpf-next/c/770b62a6d389
You are awesome, thank you!
--
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html