Linux Kernel Integer Overflow Vulnerability in IMA Appraisal

A potential integer overflow vulnerability has been identified in the Linux kernel's Integrity Measurement Architecture (IMA) appraise feature. When the IMA module signature verification is enabled, a negative return code passed to the 'evm_verifyxattr()' function could lead to an integer overflow.

Impact

Exploitation of this vulnerability could result in an integer overflow, which may be leveraged to cause unexpected behavior in the kernel, potentially leading to memory corruption or other vulnerabilities that could be exploited.