Local privilege escalation via BPF register liveness misclassification

Privilege escalation in the Linux kernel 6.19 through 6.19.5 allows local users to execute code with kernel privileges via a crafted BPF program. The BPF verifier's compute_insn_live_regs() function fails to mark the destination register of an indirect gotox instruction as used, producing an incorrect register-liveness result. The attack requires local low-privileged access and the ability to invoke bpf() with BPF_PROG_LOAD and an instruction-array map; no user interaction is required.