This patchset is going to fix CVE-2024-47703, which may resulting in kernel panic.
Tengda Wu (1): bpf, lsm: Add check for BPF LSM return value
Xu Kuohai (1): bpf, lsm: Add disabled BPF LSM hook list
include/linux/bpf.h | 1 + include/linux/bpf_lsm.h | 8 ++++ include/linux/bpf_verifier.h | 5 +++ kernel/bpf/bpf_lsm.c | 63 ++++++++++++++++++++++++++++-- kernel/bpf/btf.c | 3 ++ kernel/bpf/verifier.c | 74 ++++++++++++++++++++++++++++++++++-- 6 files changed, 147 insertions(+), 7 deletions(-)