src/sys/compat/linux, branch main

linux/futex: Don't load a timeout when try-locking a mutex

2026-07-07T23:28:55+00:00

linux_sys_futex() does not copyin a timespec for the timeout if the
operation is LINUX_FUTEX_TRYLOCK_PI, presumably because it doesn't make
sense to specify a timeout for a try-lock operation.  However, this
means that we pass a userspace timespec pointer to
linux_umtx_abs_timeout_init().

Modify linux_futex_lock_pi() to not initialize the timeout if we're
try-locking.

Reviewed by:	kib, dchagin
Reported by:	Yuxiang Yang, Yizhou Zhao, Ao Wang, Xuewei Feng, Qi Li,
		and Ke Xu from Tsinghua University using GLM-5.2 from Z.ai
MFC after:	1 week
Sponsored by:	The FreeBSD Foundation
Differential Revision:	https://reviews.freebsd.org/D58061

linux: switch off interface name translation and schedule its removal

2026-07-07T21:19:17+00:00

Modern Linuxes don't use ethX for almost 15 years already, see [1] and
[2].  The translation logic has always been a source of bugs and PITA.
Switch default to not translate (long due!) and schedule removal of the
code for FreeBSD 17.

[1] https://systemd.io/PREDICTABLE_INTERFACE_NAMES/
[2] https://www.freedesktop.org/software/systemd/man/latest/systemd.net-naming-scheme.html

Reviewed by:		iwtcex_gmail.com, vvd, melifaro, dchagin
Differential Revision:	https://reviews.freebsd.org/D57852

linuxulator: Fix operator precedence for LINUX_XATTR_FLAGS in setxattr()

2026-07-02T11:17:01+00:00

The LINUX_XATTR_FLAGS macro expands to (LINUX_XATTR_CREATE|LINUX_XATTR_REPLACE).
Without parentheses around the macro expansion, the bitwise & operator has
higher precedence than |, causing incorrect flag evaluation and a compiler
warning.

Add the missing parentheses around LINUX_XATTR_FLAGS to ensure correct
operator grouping, matching the existing usage in getxattr().

Signed-off-by:	YAO, Xin 
Fixes:		2c905456312b ("linuxulator: Fix O_PATH file descriptors errno for f*xattr(2)")
Reviewed by:	kib
Pull Request:	https://github.com/freebsd/freebsd-src/pull/2306

linuxulator: Add linux_extattr_get_vp() for atomic getxattr

2026-07-01T08:38:32+00:00

Move the atomic size-probe-and-read logic into a new
linux_extattr_get_vp() function in linux_xattr.c instead of
modifying the generic extattr_get_vp() in vfs_extattr.c.
This keeps Linux-specific getxattr semantics (ERANGE on
too-small buffer, EOPNOTSUPP to ENOATTR mapping)
self-contained within the linuxulator.

The function probes the attribute size and reads the data
under a single vnode lock, preventing a TOCTOU race between
the size probe and data read.

Signed-off-by:	YAO, Xin 
Reviewed by:	kib
Pull Request:	https://github.com/freebsd/freebsd-src/pull/2263

linuxulator: Fix O_PATH file descriptors errno for f*xattr(2)

2026-07-01T08:38:05+00:00

LTP open13 expects these operations to fail with EBADF, matching
Linux behavior, but FreeBSD currently returns EOPNOTSUPP
for fgetxattr() on an O_PATH fd

Look up Linux fd-based xattr descriptors with getvnode()
and route the operations through shared kern_extattr_*_fp()
helpers so the O_PATH check and the extattr operation use the
same referenced file.

Apply the same EBADF handling to fsetxattr(), fremovexattr(), and
flistxattr() so the xattr paths stay consistent.

Signed-off-by:	YAO, Xin 
PR:		295537
Reviewed by:	kib
Pull Request:	https://github.com/freebsd/freebsd-src/pull/2263

linux_prlimit(): block execve for the target

2026-06-21T11:46:53+00:00

Reviewed by:	markj
Tested by:	pho
Sponsored by:	The FreeBSD Foundation
MFC after:	1 week
Differential revision:	https://reviews.freebsd.org/D57497

linux: implement SO_PASSRIGHTS

2026-06-19T04:03:30+00:00

We have a native version now, plumb it through to the Linuxolator.

Reviewed by:	glebius, markj
Differential Revision:	https://reviews.freebsd.org/D57427

linux: Add TCP_INFO support

2026-06-10T00:23:24+00:00

Implement the getsockopt for TCP_INFO by mapping FreeBSD's version to
what Linux expects.

MFC after:	1 month
Relnotes:	yes
Reviewed by:	kib
Differential Revision:	https://reviews.freebsd.org/D55882

linux: Correct the issetugid check in copyout_auxargs

2026-06-09T19:13:21+00:00

The runtime linker in glibc relies on the AT_SECURE auxv entry to know
whether the executable is set-ugid, if so then various dangerous
functionality such as LD_PRELOAD is disabled.

The check added in commit 669414e4fb74 failed to take into account the
fact that during execve, P_SUGID may not yet be set for a set-ugid
process.  Correct the test.

Approved by:	so
Security:	FreeBSD-SA-26:30.linux
Security:	CVE-2026-49413
Reported by:	Minseong Kim
Fixes:		669414e4fb74 ("Implement AT_SECURE properly.")
Reviewed by:	kib
Sponsored by:	The FreeBSD Foundation
Differential Revision:	https://reviews.freebsd.org/D57350

linux: Fix sockopt copyout

2026-06-08T21:20:14+00:00

The Linux getsockopt did not check the size of the provided buffer when
copying out the value, leading to buffer overflows (e.g., for TCP_INFO).

Fix is to use the smaller of the option value size and the provided
buffer.

MFC after:	1 month
Relnotes:	yes
Reviewed by:	kib, markj
Differential Revision:	https://reviews.freebsd.org/D55881