__cgroup_bpf_replace(9)

💖 __cgroup_bpf_replace(9) 💖

okay so welcome to the Kernel API Manual entry for __cgroup_bpf_replace(9), bestie. this one is lowkey niche but highkey important if you're messing with cgroup BPF internals, so grab your iced coffee and let's get into it 💅

---

✨ NAME ✨

__cgroup_bpf_replace — replace link's program and propagate the change to descendants. fr fr, that's the whole vibe of this function 👑

---

🛠️ SYNOPSIS 🛠️

int __cgroup_bpf_replace (struct cgroup *cgrp , struct bpf_cgroup_link *link , struct bpf_prog *new_prog );

---

🧚 ARGUMENTS 🧚

• cgrp — the cgroup whose descendants you're traversing, iykyk 🌸
• link — a link for which to replace the BPF program 🎀
• new_prog — a struct bpf_prog for the target BPF program, with its refcnt incremented ✨

---

💅 DESCRIPTION 💅

okay so the way that this is literally a “read the fine print” moment: Must be called with cgroup_mutex held. no cap. do not skip that part, bestie 😭

🚨 bestie warning: Must be called with cgroup_mutex held. like, that is the vibe check. periodt.

---

👀 SEE ALSO 👀

if you're going down the kernel rabbit hole — and honestly, obsessed — peek at the kernel file ./kernel/bpf/cgroup.c and these icons:

• Kernel file: ./kernel/bpf/cgroup.c
• cgroup_bpf_release(9)
• cgroup_bpf_release_fn(9)
• cgroup_bpf_inherit(9)
• __cgroup_bpf_attach(9)
• purge_effective_progs(9)
• __cgroup_bpf_detach(9)
• __cgroup_bpf_run_filter_skb(9)
• __cgroup_bpf_run_filter_sk(9)
• __cgroup_bpf_run_filter_sock_addr(9)
• __cgroup_bpf_run_filter_sock_ops(9)
• __cgroup_bpf_run_filter_sysctl(9)

---

mwah 💋 that's the page, bestie — source/version: ./kernel/bpf, dated October 2026 🦋💖