bpf: Reject replace_bpf_fd in bpf_prog_detach

The replace_bpf_fd is not used upon bpf_prog_detach(), therefore reject any non-zero value. Signed-off-by: Lorenz Bauer <lmb@isovalent.com> Signed-off-by: Daniel Borkmann <daniel@iogearbox.net>
cilium · Oct 5, 2023 · 6bd059b · 6bd059b
1 parent 25db9f9
commit 6bd059b
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/kernel/bpf/syscall.c b/kernel/bpf/syscall.c
@@ -3871,6 +3871,8 @@ static int bpf_prog_detach(const union bpf_attr *attr)
 
 	if (CHECK_ATTR(BPF_PROG_DETACH))
 		return -EINVAL;
+	if (attr->replace_bpf_fd)
+		return -EINVAL;
 
 	ptype = attach_type_to_prog_type(attr->attach_type);
 	if (bpf_mprog_supported(ptype)) {