CVE-2022-50650

The CVE-2022-50650 vulnerability is in the Linux kernel’s BPF verifier regarding reference state management for synchronous callbacks. The issue arises because the verifier assumes callbacks run once, while for_each style helpers can run a callback multiple times. This can cause leaks by misaccou...