Re: [PATCH net] net/sched: cls_bpf: reject dev-bound programs bound to a different device

Hello:

This patch was applied to netdev/net.git (main)
by Paolo Abeni [off-list ref]:

On Sun,  9 Aug 2026 05:44:18 -0400 you wrote:

cls_bpf_prog_from_efd() obtained a SCHED_CLS program via
bpf_prog_get_type_dev() but never verified that a device-bound (offloaded)
program's bound netdev matches the TC netdev the classifier is being
attached to. This let a program loaded with prog_ifindex for device A be
attached via cls_bpf + skip_sw to device B; deleting device A then
destroyed the program's offload state while it was still attached to
device B, triggering a netdevsim WARN (panic with panic_on_warn=1).

[...]

Here is the summary with links:
  - [net] net/sched: cls_bpf: reject dev-bound programs bound to a different device
    https://git.kernel.org/netdev/net/c/120977e2c096

You are awesome, thank you!
-- 
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html