bpf: Fix tcx/netkit detach permissions when prog fd isn't given

Browse source

[ Upstream commit ae23bc81dd ]

This commit fixes a security issue where BPF_PROG_DETACH on tcx or
netkit devices could be executed by any user when no program fd was
provided, bypassing permission checks. The fix adds a capability
check for CAP_NET_ADMIN or CAP_SYS_ADMIN in this case.

Fixes: e420bed025 ("bpf: Add fd-based tcx multi-prog infra with link support")
Signed-off-by: Guillaume Gonnet <ggonnet.linux@gmail.com>
Link: https://lore.kernel.org/r/20260127160200.10395-1-ggonnet.linux@gmail.com
Signed-off-by: Alexei Starovoitov <ast@kernel.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>

...

This commit is contained in:

Guillaume Gonnet 2026-01-27 17:02:00 +01:00 • committed by Greg Kroah-Hartman

parent 4b8d1424b3

commit 4e0772cded

3 changed files with 17 additions and 5 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

5

include/linux/bpf.h

View file

10

include/linux/bpf_mprog.h

View file

7

kernel/bpf/syscall.c

View file