NetSight
IP …
medium5.5

CVE-2024-58017

In the Linux kernel, the following vulnerability has been resolved: printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX Shifting 1 << 31 on a 32-…

Impact

In the Linux kernel, the following vulnerability has been resolved: printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX Shifting 1 << 31 on a 32-bit int causes signed integer overflow, which leads to undefined behavior. To prevent this, cast 1 to u32 before performing the shift, ensuring well-defined behavior. This change explicitly avoids any potential overflow by ensuring that the shift occurs on an unsigned 32-bit integer.

Affected products

VendorProductAffected versions
LinuxLinux Kernel
before 6.1.129
from 6.2 before 6.6.78
from 6.7 before 6.12.14
from 6.13 before 6.13.3

Weakness classification

CWE-190

References