microsoft/ebpf-for-windows v1.4.0

Release-v1.4.0

Repository: microsoft/ebpf-for-windows

Tag: v1.4.0

Published: 2026-07-24T01:49:33Z

Prerelease: yes

Release notes:

Highlights

New attach types introduced in BPF_PROG_TYPE_CGROUP_SOCK_ADDR

• BPF_CGROUP_INET4_BIND
• BPF_CGROUP_INET6_BIND
• BPF_CGROUP_INET4_LISTEN,
• BPF_CGROUP_INET6_LISTEN,

What's Changed

• Switch from using choco to curl in pipeline by @nmlud21 in https://github.com/microsoft/ebpf-for-windows/pull/5255
• Update-WdkVersion.ps1 now sorts by latest version by @nmlud21 in https://github.com/microsoft/ebpf-for-windows/pull/5258
• fix: pass CODECOV_TOKEN, remove invalid functionalities input, and update codecov-action to v6.0.1 by @saxena-anurag with @Copilot in https://github.com/microsoft/ebpf-for-windows/pull/5305
• Fix bpf2bpf calls: global helper index, runtime_context propagation, and map access from subprograms by @saxena-anurag in https://github.com/microsoft/ebpf-for-windows/pull/5274
• Add fuzz test checkbox in PR template by @dthaler in https://github.com/microsoft/ebpf-for-windows/pull/5331
• [doc][netebpfext] Add proposal for async operations in netebpfext by @matthewige in https://github.com/microsoft/ebpf-for-windows/pull/5189
• Update version to 1.4 by @saxena-anurag in https://github.com/microsoft/ebpf-for-windows/pull/5333
• Implement sock_addr bind hook by @mikeagun in https://github.com/microsoft/ebpf-for-windows/pull/5272
• Update bind test prog version by @shankarseal in https://github.com/microsoft/ebpf-for-windows/pull/5347
• Update bind test prog version by @shankarseal in https://github.com/microsoft/ebpf-for-windows/pull/5356
• Remove ubpf from arm build by @LakshK98 in https://github.com/microsoft/ebpf-for-windows/pull/5342
• Add listen hook implementation to sock_addr by @mikeagun in https://github.com/microsoft/ebpf-for-windows/pull/5268
• ebpf_platform: Add missing SeReleaseSubjectContext calls by @Alan-Jowett in https://github.com/microsoft/ebpf-for-windows/pull/5288
• Add better code review prompt by @Alan-Jowett in https://github.com/microsoft/ebpf-for-windows/pull/5377
• ebpf_program: Fix rollback of program state on NmrClientAttachProvider failure by @Alan-Jowett in https://github.com/microsoft/ebpf-for-windows/pull/5287
• ebpf_program: Add NULL check for global_helper_function_addresses by @Alan-Jowett in https://github.com/microsoft/ebpf-for-windows/pull/5290
• Add Visual Studio 2026 (v145) and WDK 10.0.28000.1839 support by @shankarseal in https://github.com/microsoft/ebpf-for-windows/pull/5375
• Fix JIT / interpret flow for bpf2bpf, add tests by @saxena-anurag in https://github.com/microsoft/ebpf-for-windows/pull/5337
• Implement EverParse artifact validation by @Alan-Jowett in https://github.com/microsoft/ebpf-for-windows/pull/5369
• Fix api_test crash: don't call Catch2 REQUIRE from the consumer thread by @nmlud21 in https://github.com/microsoft/ebpf-for-windows/pull/5390
• Remove license from renovate.json by @dthaler in https://github.com/microsoft/ebpf-for-windows/pull/5393
• Revert rename of ebpf_context_descriptor_t to ebpf_ctx_descriptor_t by @saxena-anurag in https://github.com/microsoft/ebpf-for-windows/pull/5399
• Fix fuzzer stack-buffer-overflow: scope hook client by program type by @mikeagun in https://github.com/microsoft/ebpf-for-windows/pull/5379
• docs: add release regression test reminder by @pollychen-lab in https://github.com/microsoft/ebpf-for-windows/pull/5398
• Add additional curl retry logic by @nmlud21 in https://github.com/microsoft/ebpf-for-windows/pull/5357
• Bump external/ubpf to close ubpf_fuzzer ASAN crash by @mikeagun in https://github.com/microsoft/ebpf-for-windows/pull/5374
• Move CI/CD to windows-2025 for VS 2026 support by @nmlud21 in https://github.com/microsoft/ebpf-for-windows/pull/5257
• user mode test hook provider supporting multiple programs to be attached. by @shankarseal in https://github.com/microsoft/ebpf-for-windows/pull/5389
• bpf2c array map lookup optimization. by @saxena-anurag in https://github.com/microsoft/ebpf-for-windows/pull/5127
• Update regression test version to 1.3 by @saxena-anurag in https://github.com/microsoft/ebpf-for-windows/pull/5405
• Add global virtual bpf_redirect_map helper by @mtfriesen in https://github.com/microsoft/ebpf-for-windows/pull/5302

windows/pull/5409

• support multiple programs in sample extension. by @shankarseal in https://github.com/microsoft/ebpf-for-windows/pull/5410
• Cherry pick #5441 and #5433 (hot-add CPU workaround and procdump hash update) to release/1.4 by @mikeagun in https://github.com/microsoft/ebpf-for-windows/pull/5448
• Cherry pick changes to v1.4 by @shankarseal in https://github.com/microsoft/ebpf-for-windows/pull/5449
• Update SPD file by @nmlud21 in https://github.com/microsoft/ebpf-for-windows/pull/5451
• CP PR #5446 to release/1.4 branch by @saxena-anurag in https://github.com/microsoft/ebpf-for-windows/pull/5452

New Contributors

• @pollychen-lab made their first contribution in https://github.com/microsoft/ebpf-for-windows/pull/5398

Full Changelog: https://github.com/microsoft/ebpf-for-windows/compare/v1.3.0...v1.4.0