THREATOPS
THREAT OPSThreat News › Re: Backports available - cBPF JIT spray hardening

Re: Backports available - cBPF JIT spray hardening

lowoss_secPublished 2026-07-30

<p>Posted by Pawan Gupta on Jul 30</p>Pack allocator was first introduced in 5.18 by commit:<br /> <br /> 57631054fae6 (&quot;bpf: Introduce bpf_prog_pack allocator&quot;)<br /> <br /> This means that 5.17 is in the same boat as 5.15, it does not support BPF<br /> pack allocator, and these hardening patches dont apply.<br /> <br /> Pack allocator makes the JIT spraying attacks easier, but this d

Original source: https://seclists.org/oss-sec/2026/q3/334