CVE-2024-58098

The CVE-2024-58098 issue affects the Linux kernel BPF verifier, specifically the logic tracking changes_pkt_data for global sub-programs. When verifiers process calls to helpers, pointers may be invalidated inconsistently between callers and global sub-programs, making certain programs unsafe (e....

The vulnerability of the `fixup_bpf_calls()` function in the `kernel/bpf/verifier.c` module, which supports the BPF interpreter of the Linux operating system, allows a hacker to trigger a service failure.

The vulnerability of the fixupbpfcalls function in the kernel/bpf/verifier.c module, which is part of the Linux kernel’s BPF interpreter support, is related to incorrect input validation. Exploiting this vulnerability could allow an attacker to trigger a system failure...