[PATCH bpf-next 0/3] bpf, sockmap: Restrict iter-context sockmap updates to sockmap iterators
From: Michal Luczaj
Date: Fri Oct 16 2026 - 18:14:29 EST
Follow-up to Sashiko's report [1] and the decision to restrict which
iterator may perform sockmap updates [2].
Three-patch set: remove about-to-be-stale test, restrict updates, add a
negative test.
[1]: https://msgid.link/20260626205814.BAC3C1F000E9@xxxxxxxxxxxxxxx
[2]: https://msgid.link/87echn2fhd.fsf@xxxxxxxxxxxxxx
Signed-off-by: Michal Luczaj <mhal@xxxxxxx>
---
Michal Luczaj (3):
selftests/bpf: Remove sockmap update from bpf_iter_unix
bpf, sockmap: Restrict iter-context sockmap updates to iter/sockmap
selftests/bpf: Add negative test for sockmap update from non-sockmap iter
kernel/bpf/verifier.c | 8 +++++++-
tools/testing/selftests/bpf/progs/bpf_iter_unix.c | 10 ----------
.../testing/selftests/bpf/progs/verifier_sockmap_mutate.c | 14 ++++++++++++++
3 files changed, 21 insertions(+), 11 deletions(-)
---
base-commit: 645f5fcf7a5582f5d6ed2322f41cb34076c63b2c
change-id: 20261008-sockmap-update-limit-iter-d03ea25f9775
Best regards,
--
Michal Luczaj <mhal@xxxxxxx>