Shift Out-of-Bounds Vulnerability in Linux Kernel binfmt_misc

CVE-2022-50497

What is CVE-2022-50497?

A vulnerability in the Linux kernel's binfmt_misc component has been identified, allowing for a left shift of 1 by 31 places that exceeds the boundaries of the integer type. This issue was flagged by the Undefined Behavior Sanitizer (UBSAN) and occurs in the check_special_flags function. Proper macro definitions are essential to address this issue, ensuring that flag types align with the expected unsigned long specifications. Failure to rectify this could lead to potential instability or unexpected behavior in kernel operations.

References