CVE-2025-40169
CVE-2025-40169 : In the Linux kernel BPF verifier, check_alu_op() previously allowed negative offsets for ALU operations due to signed 16-bit off; the condition insn->off > 1 was meant to permit only 0 or 1 for BPF_MOD/BPF_DIV but accepted negatives. The fix tightens validation to (insn->...
