BPF Congestion Control Exposed Two Linux TCP Use-After-Free Paths

A Linux TCP query can touch congestion-control memory after a concurrent BPF update has freed it. Two new use-after-free reports show how an ordinary read path inherited a lifetime assumption that no longer holds when BPF makes congestion-control objects dynamically replaceable.LinuxSecurity – Security ArticlesRead More