Integer Overflow Vulnerability in Linux Kernel Affecting FPGA Feature Management

CVE-2022-50623

What is CVE-2022-50623?

A vulnerability in the Linux kernel's FPGA feature management can lead to integer overflow. This issue arises from the improper multiplication of 'hdr.count' with 'sizeof(s32)' on 32-bit systems, potentially resulting in memory corruption. The flaw can be exploited to disrupt system stability or allow unauthorized access to kernel memory. A secure fix has been implemented utilizing the 'array_size()' function to eliminate this risk. It is crucial for users to upgrade to the latest version of the Linux kernel to protect against such vulnerabilities.

References