A subtle bug in the Linux kernel’s eBPF fentry attach path — tracked as CVE-2023-53221 — can leave behind allocated BPF trampoline images when an fentry attach fails, producing a persistent memory leak that, if abused at scale, can deny availability to services and systems; this behavior is...