Linux Kernel Undefined Behavior Vulnerability in MDIO Bus Registration

A vulnerability in the Linux kernel's handling of the MDIO bus registration has been addressed. The issue stemmed from shifting a signed 32-bit value by 31 bits, which created undefined behavior. This vulnerability was identified by a UBSAN warning, indicating a shift-out-of-bounds error. The call trace associated with this warning reveals the sequence of function calls leading to the vulnerability, starting from the MDIO bus registration function.

Impact

Exploitation of this vulnerability could lead to undefined behavior in the kernel, potentially causing instability or unexpected behavior in the system.