Linux Kernel dm Ioctl Race Condition Vulnerability Leading to Buffer Mismanagement

A vulnerability in the Linux kernel's device-mapper (dm) ioctl handling has been addressed. The issue arises from a race condition between version listing and module loading, which can lead to improper buffer management. The 'dm_target_iterate' function is used to estimate required buffer space and to fill it with data. However, the second call can overwrite data if the buffer is not properly sized, causing truncation. This vulnerability has been fixed by ensuring that the data is written only up to the allocated buffer size, preventing overflow.

Impact

The vulnerability could lead to a buffer management error, where data is truncated, potentially causing incorrect behavior in applications relying on this ioctl interface.