CVE-2024-58098

Medium

Published: —Translated: 07/08/2026(UTC)NVD NIST

Summary

In the Linux kernel, the BPF verifier now tracks the changes_pkt_data property for global functions. It invalidates packet pointers in the current state after calling certain helpers.

Risk Assessment

Lack of tracking could lead to incorrect verification of BPF programs, potentially causing system crashes or unauthorized memory access.

Recommendation

Apply a Linux kernel update that includes the fix for the BPF verifier.

Original NVD description (English source)

In the Linux kernel, the following vulnerability has been resolved: bpf: track changes_pkt_data property for global functions When processing calls to certain helpers, verifier invalidates all packet pointers in a current state. For example, consider the following program: __attribute__((__no