#cgroup

BPF cgroup link update fixed for stack out-of-bounds write

Replacement programs were matched only by type, so incompatible sock_addr and LSM hooks could clobber adjacent stack state.