bpf devmap

The Linux kernel’s CVE-2026-23359 is a classic example of how a small-looking bounds mistake in BPF devmap code can turn into a real memory-safety problem. The issue sits in get_upper_ifindexes(), where the kernel walks every upper device and writes interface indices into an array without...

A small but important Linux-kernel fix — tracked as CVE-2024-26885 — closed a subtle integer‑overflow check in the BPF devmap code that could be triggered on 32‑bit architectures; Microsoft’s public advisory identifies Azure Linux as a product that includes the upstream component, but that...