Commit f0e77c598ebb for kernel

commit f0e77c598ebbb1ae055b156aaa33b7433ae45e51
Merge: 4cbfe4502e3d 7dd62566e0d1
Author: Linus Torvalds <torvalds@linux-foundation.org>
Date:   Sun May 24 09:53:17 2026 -0700

    Merge tag 'bpf-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf

    Pull bpf fixes from Alexei Starovoitov:

     - Fix bpf_throw() and global subprog combination (Kumar Kartikeya
       Dwivedi)

     - Fix out of bounds access in BPF interpreter (Yazhou Tang)

     - Fix potential out of bounds access in inner per-cpu array map
       (Guannan Wang)

     - Reject NULL data/sig in bpf_verify_pkcs7_signature (KP Singh)

    * tag 'bpf-fixes' of git://git.kernel.org/pub/scm/linux/kernel/git/bpf/bpf:
      libbpf: fix off-by-one in emit_signature_match jump offset
      bpf: Reject NULL data/sig in bpf_verify_pkcs7_signature
      selftests/bpf: Cover global subprog exception leaks
      bpf: Check global subprog exception paths
      bpf: make bpf_session_is_return() reference optional
      bpf: Use array_map_meta_equal for percpu array inner map replacement
      selftests/bpf: Add test for large offset bpf-to-bpf call
      bpf: Fix s16 truncation for large bpf-to-bpf call offsets
      bpf: Fix out-of-bounds read in bpf_patch_call_args()