kernel/bpf/verifier.c in the Linux kernel through 5.15.14 allows local users to gain privileges because of the availability of pointer arithmetic via certain *ORNULL pointer types.
{ "urgency": "not yet assigned" }