I don’t know about the past, but you can absolutely dereference userspace memory in ebpf.