Linux Kernel ntb_hw_switchtec Shift-Out-Of-Bounds Vulnerability

A shift-out-of-bounds vulnerability has been identified in the Linux kernel's ntb_hw_switchtec component. This issue arises in the ntb_mw_set_trans function, where the ntb_mw_clear_trans API incorrectly passes zero values for both address and size. This mismanagement leads to a negative xlate_pos, triggering the shift-out-of-bounds condition. The vulnerability has been addressed by ensuring that xlate_pos remains positive or zero before applying the BIT operation.

Impact

Exploitation of this vulnerability could lead to undefined behavior, potentially allowing for memory corruption or other unintended consequences due to the out-of-bounds shift operation.