Memory Allocation Vulnerability in Linux Kernel Affects Int Max Byte Allocation

CVE-2024-23851

Summary

A vulnerability in the Linux kernel through version 6.7.1 can cause the system to attempt to allocate more than INT_MAX bytes due to a missing check on param_kernel->data_size in the copy_params function within the drivers/md/dm-ioctl.c file. This oversight can lead to unexpected crashes and system instability, especially when executing ioctl commands related to device mapping.

References