bpf: Fix oob access in cgroup local storage

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2025-38502 · Microsoft / collected KEV context

cve-program · CVE-2025-38502

• https://git.kernel.org/stable/c/c1c74584b9b4043c52e41fec415226e582d266a3
• https://git.kernel.org/stable/c/66da7cee78590259b400e51a70622ccd41da7bb2
• https://git.kernel.org/stable/c/7acfa07c585e3d7a64654d38f0a5c762877d0b9b
• https://git.kernel.org/stable/c/41688d1fc5d163a6c2c0e95c0419e2cb31a44648
• https://git.kernel.org/stable/c/19341d5c59e8c7e8528e40f8663e99d67810473c
• https://git.kernel.org/stable/c/abad3d0bad72a52137e0c350c59542d75ae4f513

No related operational record is retained in the current change model.