I noticed that bpf speculative execution fixes are already queued for 4.14.y except for f232326f6966 ("bpf: Prohibit alu ops for pointer types not defining ptr_limit").
It is important that for all patches from this series to be applied together, so we avoid introducing a new vulnerability.
For the missing patch, I see conflicting lines in the context diffs due to API change that apparently caused import to fail.
I'm attaching a copy of the patch that is backported to 4.14.y. The only change comparing with version queued for newer version is that "verbose" API does not take "env" parameter.
Please queue or let me know how to proceed.
Thanks,
Piotr