Anthropic-Reported Linux BPF Verifier Fixes Merged Into Mainline Kernel

terryyuezhuo · x · 2026-09-07

A batch of Linux kernel BPF fixes stemming from Anthropic reports has been merged into mainline by Linus Torvalds (bpf-fixes). The verifier fixes address bugs reported by Nicholas Carlini, including incorrect non-NULL inference in pointer comparisons, precision tracking issues with bpfloop() callbacks and half-dead zero spills, and rejection of BPFPSEUDOFUNC references to the main program. Further fixes cover percpu map updates, NULL-pointer derefs in bpfsnprintfbtf(), and an out-of-bounds access in the disassembler. Notable example of AI-assisted discovery of real kernel-level bugs.

Original post →

More from Safety

Safety channel →