CVE-2024-49850

The CVE affects the Linux kernel: a malformed BPF_CORE_TYPE_ID_LOCAL relocation referencing a non-existing BTF type can trigger a NULL pointer dereference in bpf_core_calc_relo_insn. The issue is fixed by adding an upper-call-stack check to reject malformed relocations passed from user space. Rep...