Threats tagged 'ghsa-89pr-66m5-4vwv'

CVE-2025-22087 is a high-severity vulnerability in the Linux kernel's BPF subsystem involving an array bounds error caused by the use of an additional 8 bytes on the stack in the may_goto function. This leads to out-of-bounds access in the interpreters[] array during stack size calculations. The flaw affects BPF program rewriting and execution, particularly in non-JIT and JIT cases, potentially causing memory safety issues.