Hacker: Useful eBPF packet filter has many vulnerabilities
The extended Berkeley Packet Filter (eBPF) filters data packets from networks and embeds them in the operating system core. The technology supports users in the administration and protection of computers and networks. However, what administrators and security teams rarely take into account sufficiently: The packet filter has numerous vulnerabilities that can easily be misused by hackers for a cyber attack. The extended Berkeley Packet Filter is a special purpose virtual machine that allows sandboxed programs to run in a privileged context, such as the operating system kernel. It forms an interface to data link layers of data units. The technology supports both…
