Linux Kernel Block Device Minor Number Overflow Vulnerability

A vulnerability in the Linux kernel's block device handling can lead to an overflow issue. The problem arises in the function blk_alloc_ext_minor(), which allocates minor device numbers within a specified range. The highest minor number, NR_EXT_DEVT, is returned by this function and is used in device_add_disk() to set the device's identifier. Since NR_EXT_DEVT represents the total number of extended device types, this can cause an overflow if not properly managed.

Impact

Exploitation of this vulnerability could result in a minor number overflow, potentially leading to incorrect device management or system instability.