PT-2026-61353

In the Linux kernel, the following vulnerability has been resolved: cgroup/rstat: validate cpu before css rstat cpu access css rstat updated is exposed as a BPF kfunc and accepts a caller-provided cpu argument. The function uses cpu for per-cpu rstat lookups without checking whether it refers to ...