CVE-2024-58100
MediumSummary
In the Linux kernel, the BPF verifier now checks the changes_pkt_data property for extension programs. It decides whether to invalidate all packet pointers in the current state based on this property.
Risk Assessment
Incorrect checking could lead to BPF verification errors, potentially causing system crashes or incorrect behavior of BPF programs.
Recommendation
Install a Linux kernel update that includes the fix for the BPF verifier.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: bpf: check changes_pkt_data property for extension programs When processing calls to global sub-programs, verifier decides whether to invalidate all packet pointers in current state depending on the changes_pkt_data property of th

