Re: [PATCH bpf v2 RESEND 1/2] bpf: reject dev-bound-only programs on other devices

[patchwork-bot+netdevbpf@kernel.org]

Hello:

This series was applied to bpf/bpf.git (master)
by Alexei Starovoitov <ast@kernel.org>:

On Sun, 20 Sep 2026 21:23:04 +0800 you wrote:
> __bpf_offload_dev_match() falls back to comparing offdev pointers after an
> exact netdev mismatch. Bound-only programs normally have NULL offdevs, so
> unrelated netdevs compare equal. A bound-only program on an
> offload-registered netdev can instead inherit a real offdev and match a
> sibling port. With CAP_BPF and CAP_NET_ADMIN, a caller can use
> bpf(BPF_LINK_CREATE) with a different target ifindex to run metadata kfuncs
> specialized for the bound driver on the target driver's xdp_buff. Running a
> veth-bound program on tun reads beyond tun's bare stack xdp_buff as a
> veth_xdp_buff.
> 
> [...]

Here is the summary with links:
  - [bpf,v2,RESEND,1/2] bpf: reject dev-bound-only programs on other devices
    https://git.kernel.org/bpf/bpf/c/6db1ce73e985
  - [bpf,v2,RESEND,2/2] selftests: net: test cross-device XDP dev-bound attachment
    (no matching commit)

You are awesome, thank you!
-- 
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html