Threats tagged 'ghsa-vf64-qg5h-qxhf'

CVE-2024-49861 is a high-severity vulnerability in the Linux kernel's BPF subsystem where certain helpers could write to read-only BPF maps. This flaw allowed bypassing intended read-only protections by exploiting argument handling in BPF helper functions. The issue arises from improper annotation of helper arguments, leading to incorrect memory access assumptions. The vulnerability has been fixed by correcting argument annotations and enforcing alignment and memory access rules.