[GIT PULL 01/16 for v7.2] vfs kfunc

From: Christian Brauner

Date: Fri Jun 12 2026 - 11:12:21 EST


Hey Linus,

/* Summary */

This contains a fix for the bpf filesystem kfuncs.

The bpf_set_dentry_xattr() and bpf_remove_dentry_xattr() kfuncs locked
the inode of the supplied dentry without checking whether the dentry is
negative. Passing a negative dentry (e.g., from security_inode_create)
caused a NULL pointer dereference. Negative dentries now fail with
EINVAL. The WARN_ON(!inode) in the bpf xattr permission helpers is
dropped as well since it could be triggered the same way, amounting to
a denial of service on systems with panic_on_warn enabled.

/* Testing */

gcc (Debian 14.2.0-19) 14.2.0
Debian clang version 19.1.7 (3+b1)

No build failures or warnings were observed.

/* Conflicts */

Merge conflicts with mainline
=============================

No known conflicts.

Merge conflicts with other trees
================================

The following changes since commit 254f49634ee16a731174d2ae34bc50bd5f45e731:

Linux 7.1-rc1 (2026-04-26 14:19:00 -0700)

are available in the Git repository at:

git@xxxxxxxxxxxxxxxxxxx:pub/scm/linux/kernel/git/vfs/vfs tags/vfs-7.2-rc1.kfunc

for you to fetch changes up to 07410646f6ff1d23222f105ccab778957d401bbe:

bpf: fix crash in bpf_[set|remove]_dentry_xattr for negative dentries (2026-05-11 11:23:00 +0200)

----------------------------------------------------------------
vfs-7.2-rc1.kfunc

Please consider pulling these changes from the signed vfs-7.2-rc1.kfunc tag.

Thanks!
Christian

----------------------------------------------------------------
Matt Bobrowski (1):
bpf: fix crash in bpf_[set|remove]_dentry_xattr for negative dentries

fs/bpf_fs_kfuncs.c | 10 ++++++++--
1 file changed, 8 insertions(+), 2 deletions(-)