Threats tagged 'ghsa-pfch-hqrr-v4q4'

A vulnerability in the Linux kernel's BPF verifier allowed negative offsets in ALU operation instructions due to improper validation of the signed 16-bit offset field. This flaw permitted malformed BPF programs with offsets other than the explicitly allowed 0 or 1, potentially leading to high impact on confidentiality, integrity, and availability. The issue has been resolved by tightening the validation logic to reject any offset values other than 0 and 1.