Pawan Gupta 0bb99f2cfa bpf: Restrict JIT predictor flush to cBPF ...

Currently predictor flush on memory reuse is done for all BPF JIT
allocations, but only cBPF programs can be loaded by an unprivileged user.
eBPF is privileged by default, and flushing predictors for all CPUs on
every eBPF reuse penalizes the common case for no security benefit.

eBPF allocations can be frequent on busy systems, only flush predictors
for cBPF programs. Trampoline and dispatcher allocations also skip the
flush as they are eBPF-only.

Signed-off-by: Pawan Gupta <pawan.kumar.gupta@linux.intel.com>
Acked-by: Daniel Borkmann <daniel@iogearbox.net>
Signed-off-by: Daniel Borkmann <daniel@iogearbox.net>

2026-07-01 10:33:38 +02:00

..

bpf_jit_comp.c

bpf: Restrict JIT predictor flush to cBPF

2026-07-01 10:33:38 +02:00

bpf_jit.h

bpf, arm64: Use ORR-based MOV for general-purpose registers

2026-03-03 08:43:10 -08:00

bpf_timed_may_goto.S

bpf, arm64: Map BPF_REG_0 to x8 instead of x7

2026-05-13 09:27:32 -07:00

Makefile

bpf, arm64: Add JIT support for timed may_goto

2025-08-27 17:16:22 -07:00