Re: [PATCH bpf v3 0/3] bpf,tcp: Fix bpf_sock_destroy() on TIME_WAIT and listener socks

From: patchwork-bot+netdevbpf

Date: Thu Sep 10 2026 - 20:12:03 EST


Hello:

This series was applied to bpf/bpf.git (master)
by Alexei Starovoitov <ast@xxxxxxxxxx>:

On Thu, 10 Sep 2026 19:20:44 +0800 you wrote:
> Fix two bugs in bpf_sock_destroy(). One is an out-of-bounds read of
> sk->sk_protocol on TIME_WAIT and NEW_SYN_RECV socks, since the field is
> not in struct sock_common. The other is a might_sleep splat when
> destroying a listener with children in its accept queue, the
> cond_resched() in inet_csk_listen_stop() runs under the iterator's
> rcu_read_lock(). Patch 3 adds a subtest for each.
>
> [...]

Here is the summary with links:
- [bpf,v3,1/3] bpf: Fix out-of-bounds read of sk_protocol in bpf_sock_destroy()
https://git.kernel.org/bpf/bpf/c/01b245ba016d
- [bpf,v3,2/3] tcp: Skip cond_resched() in inet_csk_listen_stop() under BPF context
https://git.kernel.org/bpf/bpf/c/eaab8cab451b
- [bpf,v3,3/3] selftests/bpf: Test bpf_sock_destroy() on TIME_WAIT and listener socks
https://git.kernel.org/bpf/bpf/c/8036d3a5a658

You are awesome, thank you!
--
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html