CVE-2024-35860

CVE-2024-35860 : Linux kernel vulnerability in deferring bpf_link deallocation to after RCU grace period. When a bpf_link’s refcnt drops to zero, some active BPF programs could still access the link data via context, risking data access. The patch introduces two deallocation callbacks (synchronou...