Re: [PATCH 6.6.y] bpf: Fail verification for sign-extension of packet data/data_end/data_meta

From: Sasha Levin

Date: Tue Sep 29 2026 - 14:51:43 EST


> This one addresses CVE-2024-47702. It rejects sign-extended loads that can
> turn packet pointers into invalid addresses.

Queued for 6.6, thanks.

--
Thanks,
Sasha