From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from smtp.kernel.org (aws-us-west-2-korg-mail-alma10-1.taild15c8.ts.net [100.103.45.18]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id DB642F9E8 for ; Mon, 8 Jun 2026 22:50:07 +0000 (UTC) Authentication-Results: smtp.subspace.kernel.org; arc=none smtp.client-ip=100.103.45.18 ARC-Seal:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1780959008; cv=none; b=Z+z0tA/TNhOuTbJbhmBDXdTHDuIyZi6H1lBcR3HiV3Y925p3F51a+3O9TpDCKyONCWJOfzTKZJqT/MlP+7lQYEutzs8i3VU9UJtJwRjKwOqJVSAtd2bky20HaODDV/VGsXrM8uVbBklCL3kkVDyePjyKFX8tBS/uDPReLZKDNxw= ARC-Message-Signature:i=1; a=rsa-sha256; d=subspace.kernel.org; s=arc-20240116; t=1780959008; c=relaxed/simple; bh=Y1ezw6yh0lr4QriJVKf17QhYu3Wwtnnx+mt0/gpws9w=; h=Content-Type:MIME-Version:Subject:From:Message-Id:Date:References: In-Reply-To:To:Cc; b=NYsmmGsgvkKw2UncOkRnGAZuie6HBBRLbX45vu6iE1RsKpYi/fu9T9lsBuCjKModrVC/g5x8Vm92p+/28iQUHhMMN8v4xQTv+KxShpQcBopkKqyCTVs1mY5XNyxqHjgJkMeQKv7wU4/kDCTcvzVfkkWCin3SZfsD2tNDj5SLRR0= ARC-Authentication-Results:i=1; smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=kernel.org header.i=@kernel.org header.b=aqUoIdU0; arc=none smtp.client-ip=100.103.45.18 Authentication-Results: smtp.subspace.kernel.org; dkim=pass (2048-bit key) header.d=kernel.org header.i=@kernel.org header.b="aqUoIdU0" Received: by smtp.kernel.org (Postfix) with ESMTPSA id 655DA1F00893; Mon, 8 Jun 2026 22:50:07 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=kernel.org; s=k20260515; t=1780959007; bh=qDweXOGn0LK9hKT0UPLLnXfT2GFzAHxHj1i23DQ3Uj4=; h=Subject:From:Date:References:In-Reply-To:To:Cc; b=aqUoIdU0omLx+mIMZTm7kLyBWpRgJX6xCER2b0/gAShRZxwKEUMxGHHorWSKnZDwJ n/lsgOUv0Ocge17ek4GyM/GEkNWbB5EqFH8kzLyDagEKP6ve/j5vsFJbIYoiyy02UD cxNLe8cCO0KI4xFRSkalrYzmgOVYqTjMixprC671v/DO9CaD29exJTH9FwG/AaVSWx 0ddMtLJ3NeuZGBWwYTBzhwebX13mZzkSye4SN1yfr8FbmYkKGVjRhyq/usZiUjgaQz bz3ZgELRniujBJJAFNZ1Zm3qAmA4c07+DLdiiHf9enBvPca6z79nJ5X/0Vn7TwW0Uj N2Vmep3OyAQEw== Received: from [10.30.226.235] (localhost [IPv6:::1]) by aws-us-west-2-korg-oddjob-rhel9-1.codeaurora.org (Postfix) with ESMTP id 568FE3812FD9; Mon, 8 Jun 2026 22:50:07 +0000 (UTC) Content-Type: text/plain; charset="utf-8" Precedence: bulk X-Mailing-List: netdev@vger.kernel.org List-Id: List-Subscribe: List-Unsubscribe: MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Subject: Re: [PATCH net] tcp: restrict SO_ATTACH_FILTER to priv users From: patchwork-bot+netdevbpf@kernel.org Message-Id: <178095900590.1702157.2907124553708857115.git-patchwork-notify@kernel.org> Date: Mon, 08 Jun 2026 22:50:05 +0000 References: <20260605112134.3642413-1-edumazet@google.com> In-Reply-To: <20260605112134.3642413-1-edumazet@google.com> To: Eric Dumazet Cc: davem@davemloft.net, kuba@kernel.org, pabeni@redhat.com, horms@kernel.org, ncardwell@google.com, kuniyu@google.com, netdev@vger.kernel.org, eric.dumazet@gmail.com, tamirthesis@gmail.com, aksecurity@gmail.com, willemb@google.com, ast@kernel.org, daniel@iogearbox.net, andrii@kernel.org, martin.lau@linux.dev, eddyz87@gmail.com, memxor@gmail.com, song@kernel.org, yonghong.song@linux.dev, jolsa@kernel.org, john.fastabend@gmail.com, sdf@fomichev.me Hello: This patch was applied to netdev/net.git (main) by Jakub Kicinski : On Fri, 5 Jun 2026 11:21:34 +0000 you wrote: > This patch restricts the use of SO_ATTACH_FILTER (cBPF) on TCP sockets > to users with CAP_NET_ADMIN capability. > > This blocks potential side-channel attack where an unprivileged application > attaches a filter to leak TCP sequence/acknowledgment numbers. > > Fixes: 1da177e4c3f4 ("Linux-2.6.12-rc2") > Signed-off-by: Eric Dumazet > Reported-by: Tamir Shahar > Reported-by: Amit Klein > Cc: Willem de Bruijn > Cc: Alexei Starovoitov > Cc: Daniel Borkmann > Cc: Andrii Nakryiko > Cc: Martin KaFai Lau > Cc: Eduard Zingerman > Cc: Kumar Kartikeya Dwivedi > Cc: Song Liu > Cc: Yonghong Song > Cc: Jiri Olsa > Cc: John Fastabend > Cc: Stanislav Fomichev > > [...] Here is the summary with links: - [net] tcp: restrict SO_ATTACH_FILTER to priv users https://git.kernel.org/netdev/net/c/5d39580f68e6 You are awesome, thank you! -- Deet-doot-dot, I am a bot. https://korg.docs.kernel.org/patchwork/pwbot.html