Re: [PATCH v2] bpf: fix UAF by restoring RCU-delayed inode freeing in bpffs

From: patchwork-bot+netdevbpf

Date: Tue Jun 02 2026 - 00:10:11 EST


Hello:

This patch was applied to bpf/bpf-next.git (master)
by Alexei Starovoitov <ast@xxxxxxxxxx>:

On Tue, 2 Jun 2026 08:22:49 +0530 you wrote:
> commit 4f375ade6aa9 ("bpf: Avoid RCU context warning when unpinning
> htab with internal structs") moved inode cleanup from ->free_inode()
> into ->destroy_inode() to avoid sleeping in RCU context when calling
> bpf_any_put(). However this removed the RCU delay on freeing the
> inode itself and the cached symlink body (i_link), both of which
> can be accessed by RCU pathwalk (pick_link, may_lookup etc.).
>
> [...]

Here is the summary with links:
- [v2] bpf: fix UAF by restoring RCU-delayed inode freeing in bpffs
https://git.kernel.org/bpf/bpf-next/c/b93c55b4932d

You are awesome, thank you!
--
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html