IPv6 filter bypass via shortened socket addresses

Filter bypass in io_uring in Linux 7.2 allows local users to reach denied IPv6 destinations via shortened socket addresses. The io_connect_bpf_populate() helper requires 28 bytes before copying the destination into filter fields, leaving them zero for valid 24-byte addresses that the socket layer accepts. Exploitation requires local io_uring access and a CONNECT filter whose address or port denial is defeated by those zero fields; the demonstrated consequence is a connection to a prohibited destination.