Re: [PATCH bpf 0/2] bpf: Gate dynptr probe-read kfuncs like helpers
From: Alexei Starovoitov
Date: Mon Jun 15 2026 - 11:50:07 EST
On Mon Jun 15, 2026 at 1:31 AM PDT, Nuoqi Gui wrote:
> The dynptr probe-read kfuncs are registered as common kfuncs. That lets a
> program with the generic kfunc privilege gate call
> bpf_probe_read_kernel_dynptr(), while the legacy bpf_probe_read_kernel()
> helper is exposed only with CAP_PERFMON and is blocked by kernel-read
> lockdown.
It's fine as-is. Won't fix.
pw-bot: cr