CVE-2024-58098

CVE-2024-58098 is a Linux kernel vulnerability related to the BPF verifier and the handling of the changes_pkt_data property for global sub-programs. The provided documents describe that calls to certain helpers can cause the verifier to invalidate packet pointers, and that previously global sub-...

The vulnerability of the `fixup_bpf_calls()` function in the `kernel/bpf/verifier.c` module, which supports the BPF interpreter of the Linux operating system, allows a hacker to trigger a service failure.

The vulnerability of the fixupbpfcalls function in the kernel/bpf/verifier.c module, which is part of the Linux kernel’s BPF interpreter support, is related to incorrect input validation. Exploiting this vulnerability could allow an attacker to trigger a system failure...