Linux Kernel CAP_TO_MASK Bit Shift Vulnerability

A vulnerability in the Linux kernel's handling of capabilities has been addressed. The issue arose from shifting a signed 32-bit value by 31 bits, which is undefined behavior. This vulnerability was related to the CAP_TO_MASK functionality, where the significant bit needed to be changed to unsigned to avoid the undefined behavior. The issue triggered a Undefined Behavior Sanitizer (UBSAN) warning, indicating a shift-out-of-bounds error.

Impact

Exploitation of this vulnerability could lead to undefined behavior in the kernel, potentially causing instability or unexpected behavior in the system.