cve 2024 47702

CVE-2024-47702 is a medium-severity vulnerability in the Linux kernel's BPF (Berkeley Packet Filter) verifier. The bug involves a sign-extension mismatch when the verifier handles 32-bit loads from packet context fields such as data, data_end, and data_meta within eBPF programs. This mismatch can cause kernel verification failures and runtime crashes, including kernel OOPS and denial-of-service conditions. The issue affects systems using eBPF with __sk_buff packet pointers. Administrators are advised to apply vendor kernel updates or mitigations to address this availability risk. The vulnerability has been reported by multiple vendors and trackers.