Linux Kernel Binfmt Flat Integer Overflow Vulnerability on 32-Bit Systems

An integer overflow vulnerability has been identified in the Linux kernel's binary format (binfmt) flat handler, specifically on 32-bit systems. The issue arises because the 'relocs' count is not properly validated, leading to incorrect calculations of the 'full_data' size. While most sizes and counts are limited to 256MB, this flaw can cause the 'full_data' calculation to be erroneous, potentially allowing for memory-related exploits.

Impact

Exploitation of this vulnerability could lead to memory corruption or other undefined behavior, commonly associated with integer overflow issues, such as arbitrary code execution or causing a denial-of-service condition.