Re: [PATCH bpf v2] bpf: Fix use-after-free in offloaded map/prog info fill

[patchwork-bot+netdevbpf]

Hello:

This patch was applied to bpf/bpf-next.git (master)
by Alexei Starovoitov <ast@xxxxxxxxxx>:

On Thu,  9 Apr 2026 10:37:32 +0800 you wrote:
> When querying info for an offloaded BPF map or program,
> bpf_map_offload_info_fill_ns() and bpf_prog_offload_info_fill_ns()
> obtain the network namespace with get_net(dev_net(offmap->netdev)).
> However, the associated netdev's netns may be racing with teardown
> during netns destruction. If the netns refcount has already reached 0,
> get_net() performs a refcount_t increment on 0, triggering:
> 
> [...]

Here is the summary with links:
  - [bpf,v2] bpf: Fix use-after-free in offloaded map/prog info fill
    https://git.kernel.org/bpf/bpf-next/c/a0c584fc1805

You are awesome, thank you!
-- 
Deet-doot-dot, I am a bot.
https://korg.docs.kernel.org/patchwork/pwbot.html