From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from mail-vk1-f194.google.com (mail-vk1-f194.google.com [209.85.221.194]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 2436F2D8762 for ; Wed, 18 Feb 2026 14:48:34 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=209.85.221.194 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1771426116; cv=none; b=q3THiFiFKVOQlR1iiYwGIhrfHG25kveg+1zkcsYHtaSCSlvsm1GPbmcLarfeXWT1pXLvVYARsOHU/t0qfgmeyNB47j/1A5m39x8D+OyNRSRRQcB3KMBu6YemFFN8eTefyfoqDRJaTXc3H5lWjBzNgHk230xPAjD21FjiiL9MabE= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1771426116; c=relaxed/simple; bh=/dORPP7ez+MAH0w5mkq6DwxKmDpOJvA0tYbIP95Hc00=; h=From:To:Cc:Subject:Date:Message-ID:MIME-Version; b=Dwb7wNV4jucapT3lURHNNN278lWKlCAi5nZr3bbH7YcVgYzQGzYRnnZK41YpQX3svS2kYkuEMceGLLUulRiFQIiKcfEZTgDP3eZc35ZN7ngOHNs/k7unmCfWJT90psVC48ctnfAyM5Oplwk8WBmNmIBnZaCkRiBK8PwBxXwPyZ0= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=gmail.com; spf=pass smtp.mailfrom=gmail.com; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b=lyVNby/Z; arc=none smtp.client-ip=209.85.221.194 Authentication-Results: smtp.subspace.kernel.org; dmarc=pass (p=none dis=none) header.from=gmail.com Authentication-Results: smtp.subspace.kernel.org; spf=pass smtp.mailfrom=gmail.com Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=gmail.com header.i=@gmail.com header.b="lyVNby/Z" Received: by mail-vk1-f194.google.com with SMTP id 71dfb90a1353d-5664340e14fso1954876e0c.1 for ; Wed, 18 Feb 2026 06:48:34 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1771426113; x=1772030913; darn=vger.kernel.org; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:from:to:cc:subject:date:message-id:reply-to; bh=0b7zlInDif/NMDBxpSalKxGqiu8CNuo33RzgBRMGS6Y=; b=lyVNby/Zb8AmCCoQgbT68vzYZgoJiWqo3mdOEKSZGl2+l1oWfzDv7mBsRFRa6Nzedr e90sXYMF8i2pQts8oRYwc0VNoyNrxG0R7Yfmg7eSmpuLID/iCh5WfqxbIVeP3fev/2OU 2Llv3tTOKKzuPirmMHDH+Aj3XaDUERNf9wiwn3xm+bfKYX6zL/AsEA+h5phV9+FsEnmL cbXiWJelPmaUMZtq4RTNGsx7i6SehhCwYUtdXQRXBSVx2y7xhNH3C4CMt6dgpzV5k08k YKLVGrmvSYYHcFrUbJmXK6Ibuuv63NHpBRh1U/g0olGUkCsZGSDh4luVKVvrwxTnEN5R vcMQ== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1771426113; x=1772030913; h=content-transfer-encoding:mime-version:message-id:date:subject:cc :to:from:x-gm-gg:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=0b7zlInDif/NMDBxpSalKxGqiu8CNuo33RzgBRMGS6Y=; b=NuAh1JpaM/41wmoberOyLld4CAObwzUavbcYzSSNtjPqiQkP+fvYhSg2hhaenCRIJ8 snQw6MqBj/7dIZG859OSgDLhwq7RpnH6L/XOR6JTCZ2+Ho5A9eWe0vvhxrlU7cHNZu6o uhPf6sDOZnCPBYyfhxONDS4GMpzC+YoNSfWdDEJ5ylz798O59So4lEukfuyE5c8GWJWs rCrmcsdBWm4jAYyDf7afSz715A3Ss2iR5SLpitnaxPMAx83UdyaKvVuql26qmhEgYfOX NBX1CA3El3mJX/rUFWVoxG5fuNqDAlTHVvmBhA7iuqamhctKkSW4K4f1q/B4x/8+3WAa IZ2w== X-Gm-Message-State: AOJu0YwlBqAhkg21kJ5XCOe7xIufzepuQpu6x1iUBZoBdjDLuVIzWC0s V9egfSWTJdHTglC+gBJ8siB9Dq88/deUp/twsa0gkZuDT0BYqYyW17JYpGZofQBG X-Gm-Gg: AZuq6aK93g2gppRHT5g2NkeyxnCTFJlau4Zn8l1al0inZhGsoc7nb9DxOQklDHdp5Lw Foc8fU5iaIuLcaiTmgHQ24yz72nAW1m742mcouaJs/6RNNn9JH7Ht51ZTfrdAcc7Wp2eGxKafUF +k1iUlnM2sbnx1ML3r0qp5Y7y1+25HocR1GTYw5ExURSr22Sa9Be3wf3HenQVm4a2h8PbZxAso+ waBzCDnOr1JrgZOGbS/0LuK6zPdfS+xyy8kCjeQbuVqlKaXZloaXv8pWrwqnPYIPcyksWVYfGdw 6w9xhDmZdIHoHiq2990Q94lLULh5jepa+A1yMFLj6Z9Nx4yTg6jGWTPHonumpHLfOMhbSlJGdfn iMRyMc5LKvt4zDoWGcxoAblV+/NcRw+vFXmtUU8Tt/H/fKEdW3vujS4Prdu99IqP8dWF4y5SnqW lmfin7QXv5Hl5CUs7WVcbTe4LRNkN8ZpRoTw== X-Received: by 2002:a05:6122:65aa:b0:53c:6d68:1cce with SMTP id 71dfb90a1353d-56889c2a979mr4554456e0c.16.1771426113509; Wed, 18 Feb 2026 06:48:33 -0800 (PST) Received: from elly-G3-3579.. ([2803:9800:9881:bd6c:f409:18ee:69ab:1183]) by smtp.gmail.com with ESMTPSA id 71dfb90a1353d-5674bff1078sm12055298e0c.7.2026.02.18.06.48.30 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Wed, 18 Feb 2026 06:48:33 -0800 (PST) From: "Elly I. Esparza" To: linux-kernel@vger.kernel.org, will@kernel.org, akpm@linux-foundation.org, ast@kernel.org, yangfeng@kylinos.cn, gregkh@linuxfoundation.org, hch@lst.de, mhiramat@kernel.org, qperret@google.com Cc: "Elly I . Esparza" Subject: [PATCH 2/2] kernel/kallsyms: Prevent bypassing of kprobes blacklist Date: Wed, 18 Feb 2026 11:48:19 -0300 Message-ID: <20260218144819.24326-1-ellyesparza8@gmail.com> X-Mailer: git-send-email 2.43.0 Precedence: bulk X-Mailing-List: linux-kernel@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Kprobes can be used to get the adress of kallsyms_lookup_name() providing access to blacklisted symbols. Add kallsyms_lookup_name() to kprobes blacklist. Signed-off-by: Elly I. Esparza --- kernel/kallsyms.c | 1 + 1 file changed, 1 insertion(+) diff --git a/kernel/kallsyms.c b/kernel/kallsyms.c index 1e7635864124..13a7c0fdb5da 100644 --- a/kernel/kallsyms.c +++ b/kernel/kallsyms.c @@ -234,6 +234,7 @@ unsigned long kallsyms_lookup_name(const char *name) return module_kallsyms_lookup_name(name); } +NOKPROBE_SYMBOL(kallsyms_lookup_name) /* * Iterate over all symbols in vmlinux. For symbols from modules use -- 2.43.0