alt.hn

6/2/2026 at 5:04:33 PM

BPF support in GCC 16 and beyond

https://lwn.net/SubscriberLink/1071973/19e2866f07249dfb/

by tuananh

6/2/2026 at 10:46:55 PM

The article doesn’t explain the acronym. As far as I can tell, this refers to eBPF which is a bytecode that runs in a small VM within the Linux kernel. Originally intended for tracing network behavior it’s now used for tracing a lot more?

And since clang/LLVM compile to it, gcc is as well.

VMs are truly everywhere.

Given how ms have been targets elsewhere, like font rendering, I am curious how much this increases the attack surface of the kernel.

by vintagedave