Linux kernel
cpe:2.3:a:linux:linux_kernel:*:*:*:*:*:*:*, +4 more
A potential integer overflow vulnerability has been identified in the Linux kernel's perf subsystem for AMD processors. The issue arises from the left shift of a 32-bit integer constant, which is processed using 32-bit arithmetic and then passed as a 64-bit argument to a function. If the shift amount is 32 or more, this can result in an overflow. The vulnerability has been addressed by modifying the shift operation to use the BIT_ULL macro, ensuring proper handling of the value as an unsigned long long.
Exploitation of this vulnerability could lead to an integer overflow, potentially allowing for unexpected behavior or manipulation of data within the affected component.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.