CVE-2024-40908 is a medium severity vulnerability in the Linux kernel's BPF subsystem. It involves a crash triggered when a rawtp BPF program executed via the test_run interface calls certain helpers that access the task's bpf_ctx pointer. The issue was addressed by setting the run context (task->bpf_ctx) properly for the test_run callback.