Linux Kernel BPF Sockmap Vulnerability in TCP Message Handling

A vulnerability in the Linux kernel's TCP BPF (Berkeley Packet Filter) message handling has been identified. This issue arises in the 'tcp_bpf_send_verdict' function, where the message size is not properly accounted for, leading to an incorrect charge of the message's socket buffer size. As a result, the 'sk_forward_alloc' allocation is not accurately updated, which can cause a warning related to stream queue management. The vulnerability is present in the BPF sockmap functionality of the Linux kernel.

Impact

Exploitation of this vulnerability can lead to improper management of socket buffer allocations, potentially causing resource leaks or other unintended side effects in network communication.