Linux Kernel User Access Integer Overflow Vulnerability

A vulnerability in the Linux kernel's user access handling has been addressed. Three architectures improperly check the end of a user access against the address limit, potentially leading to an integer overflow. This flaw allows the passing of a negative length or another overflow, resulting in a false success return when it should not occur. The vulnerability has been fixed by adopting a more reliable implementation that optimizes for a constant 'size' argument, transforming the common case into a single comparison.

Impact

Exploitation of this vulnerability could lead to incorrect user access validation, allowing for potential memory corruption or unauthorized access.