Re: [PATCH v2] bpf: fix out-of-bounds frame access for async callback stack args

[Alexei Starovoitov]

On Tue, Oct 27, 2026 at 08:45 AM Henry Martin <bsdhenrymartin@xxxxxxxxx> wrote:
> Kernel helpers pass at most five callback arguments, all in
> registers, so an incoming stack argument load can never be valid in
> a callback frame.  Reject such loads when the current frame has no
> caller (curframe == 0) or is a callback frame (state->in_callback_fn).

It's fixed already.
commit 90aedf8854c0 ("bpf: Validate stack arg reads against caller state")

pw-bot: cr