Re: [PATCH bpf-next 1/4] bpf, arm64: Fix memory leak in bpf_jit_free

[Xu Kuohai]

On 7/22/2026 7:27 PM, Pu Lehui wrote:
> From: Pu Lehui <pulehui@xxxxxxxxxx>
>
> When bpf_int_jit_compile() is called for subprograms, it returns early
> during the first pass (!prog->is_func || extra_pass is false), keeping
> ctx->offset alive for the subsequent extra pass.
>
> If JIT compilation fails for a later subprogram, the BPF core aborts and
> calls bpf_jit_free() to clean up the first subprogram. However,
> bpf_jit_free() fails to free jit_data->ctx.offset, which causes a memory
> leak of the JIT context offsets array.
>
> Fix this by adding the missing kvfree(jit_data->ctx.offset) in
> bpf_jit_free().
>
> Fixes: 1dad391daef1 ("bpf, arm64: use bpf_prog_pack for memory management")
> Reported-by: Sashiko <sashiko-bot@xxxxxxxxxx>
> Signed-off-by: Pu Lehui <pulehui@xxxxxxxxxx>
> ---
>   arch/arm64/net/bpf_jit_comp.c | 1 +
>   1 file changed, 1 insertion(+)
>
> diff --git a/arch/arm64/net/bpf_jit_comp.c b/arch/arm64/net/bpf_jit_comp.c
> index 4cdc7dfb05ba..f4e4d4578e38 100644
> --- a/arch/arm64/net/bpf_jit_comp.c
> +++ b/arch/arm64/net/bpf_jit_comp.c
> @@ -3237,6 +3237,7 @@ void bpf_jit_free(struct bpf_prog *prog)
>   		 */
>   		if (jit_data) {
>   			bpf_jit_binary_pack_finalize(jit_data->ro_header, jit_data->header);
> +			kvfree(jit_data->ctx.offset);
>   			kfree(jit_data);
>   		}
>   		prog->bpf_func = (void *)prog->bpf_func - cfi_get_offset();

Acked-by: Xu Kuohai <xukuohai@xxxxxxxxxx>