Linux Kernel BPF Trampoline Array Overflow Vulnerability

A potential array overflow vulnerability has been identified in the Linux kernel's BPF (Berkeley Packet Filter) trampoline handling. The issue arises because the count of attached BPF_TRAMP_MODIFY_RETURN programs is not properly accounted for, allowing the number of these programs to exceed the maximum limit. When this occurs, it can lead to an overflow in the program storage array, as the designated structure can only accommodate a certain number of programs.

Impact

Exploitation of this vulnerability could result in a buffer overflow, potentially leading to arbitrary code execution or memory corruption.