Medium · published February 27, 2025
In the Linux kernel, the following vulnerability has been resolved:
printk: Fix signed integer overflow when defining LOG_BUF_LEN_MAX
Shifting 1 << 31 on a 32-bit int causes signed integer overflow, which
leads to undefined behavior. To prevent this, cast 1 to u32 before
performing the shift, ensuring well-defined behavior.
This change explicitly avoids any potential overflow by ensuring that
the shift occurs on an unsigned 32-bit integer.
| Product | Versions | Fixed in |
|---|---|---|
| linux/linux_kernel | < 6.1.129 | 6.1.129 |
| linux/linux_kernel | ≥ 6.2, < 6.6.78 | 6.6.78 |
| linux/linux_kernel | ≥ 6.7, < 6.12.14 | 6.12.14 |
| linux/linux_kernel | ≥ 6.13, < 6.13.3 | 6.13.3 |