Threats tagged 'ghsa-2mrf-g72x-r6vx'

A vulnerability in the Linux kernel's BPF cgroup attachment logic can cause invalid memory access due to improper cleanup after a failed program replacement. This occurs when a BPF program with local storage is replaced in multi-attach mode but the replacement fails midway, leaving dangling pointers in the still-active program's storage. The issue has been fixed by ensuring proper restoration of storage pointers and flags on error.