The PREVAIL eBPF verifier, prior to version 0.2.4, incorrectly handles ALU32 ADD and SUB instructions on pointer-typed registers. This oversight allows for the verification of potentially malicious eBPF programs, which can lead to runtime faults or misbehavior. Users of the PREVAIL eBPF verifier, especially those allowing unprivileged eBPF program loading, should apply the patch to prevent potential secur [truncated]
The PREVAIL eBPF verifier, prior to version 0.2.4, contains a critical vulnerability (CVE-2026-53671) that allows potential code execution. This issue arises from the abstract transformer incorrectly handling writes through T_CTX-typed base registers, enabling an attacker to craft an eBPF program that overwrites a context field, reloads it as T_PACKET, and dereferences an attacker-controlled address. The [truncated]
