Re: [PATCH bpf-next 1/2] bpf, test_run: Fix user-memory-access vulnerability... | netdev | Ratatoskr

bpf: xdp: unhandled error in xdp_test_run_init_page() leads to crash · Yinhao Hu <hidden> · 2025-12-18
Re: bpf: xdp: unhandled error in xdp_test_run_init_page() leads to crash · Martin KaFai Lau <martin.lau@linux.dev> · 2025-12-18
[PATCH bpf-next 0/2] bpf, test_run: Fix user-memory-access vulnerability for LIVE_FRAMES · KaFai Wan <hidden> · 2026-01-04
[PATCH bpf-next 1/2] bpf, test_run: Fix user-memory-access vulnerability for LIVE_FRAMES · KaFai Wan <hidden> · 2026-01-04
Re: [PATCH bpf-next 1/2] bpf, test_run: Fix user-memory-access vulnerability for LIVE_FRAMES · Toke Høiland-Jørgensen <hidden> · 2026-01-05
Re: [PATCH bpf-next 1/2] bpf, test_run: Fix user-memory-access vulnerability for LIVE_FRAMES · KaFai Wan <hidden> · 2026-01-05
Re: [PATCH bpf-next 1/2] bpf, test_run: Fix user-memory-access vulnerability for LIVE_FRAMES · Toke Høiland-Jørgensen <hidden> · 2026-01-05
Re: [PATCH bpf-next 1/2] bpf, test_run: Fix user-memory-access vulnerability for LIVE_FRAMES · KaFai Wan <hidden> · 2026-01-06
[PATCH bpf-next 2/2] selftests/bpf: Add test for xdp_md context with LIVE_FRAMES in BPF_PROG_TEST_RUN · KaFai Wan <hidden> · 2026-01-04
[syzbot ci] Re: bpf, test_run: Fix user-memory-access vulnerability for LIVE_FRAMES · syzbot ci <hidden> · 2026-01-05

Re: [PATCH bpf-next 1/2] bpf, test_run: Fix user-memory-access vulnerability for LIVE_FRAMES

From: Toke Høiland-Jørgensen <hidden>
Date: 2026-01-05 10:46:55
Also in: bpf, linux-kselftest, lkml

KaFai Wan [off-list ref] writes:

This fix reverts to the original version and ensures data_hard_start
correctly points to the xdp_frame structure, eliminating the security
risk.

This is wrong. We should just be checking the meta_len on input to
account for the size of xdp_frame. I'll send a patch.

-Toke