The Linux kernel vulnerability tracked as CVE‑2024‑58098 is a targeted but important correctness fix in the eBPF verifier: upstream maintainers changed how the verifier computes and propagates the changes_pkt_data property for global (non-inline) subprograms so that packet-pointer invalidation...
The Linux kernel vulnerability tracked as CVE-2024-42151 fixes a subtle but dangerous mismatch between how the eBPF verifier reasons about a test-case function parameter and how the test itself actually invokes that function — a situation that can let the verifier elide a NULL check and allow a...