CVE-2024-58237

CVE-2024-58237 concerns a Linux kernel BPF tail-call vulnerability. The issue arises because tail-called programs could run helpers that invalidate skb packet pointers; the advisory recommends treating each tail call as potentially invalidating packet pointers. The fix alters bpf_helper_changes_p...