CVE-2024-45020 bpf: Fix a kernel verifier crash in stacksafe()

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Kernel Verifier Crash and PMU Overflow Handler Fixes Announced Microsoft has published information on two vulnerabilities affecting kernel operations. CVE-2024-45020 addresses a crash in the stacksafe() function, while CVE-2024-26902 resolves a panic issue in the PMU overflow handler for RISCV architecture. Both vulnerabilities have been documented with their respective fixes. 2 sources 41