Linux Kernel LoongArch and ARM64 Out-of-Bounds Read Vulnerability in IP Checksum Code

A vulnerability causing an out-of-bounds read has been identified in the Linux kernel's IP checksum handling for negative lengths. This issue, present in the LoongArch architecture, was introduced by a commit that added checksum optimization but inadvertently caused an undefined shift and out-of-bounds access. A similar problem was fixed in the ARM64 architecture, addressing the same out-of-bounds access issue.

Impact

Exploitation of this vulnerability leads to an out-of-bounds read, which can potentially be exploited to read memory locations outside the intended buffer, possibly causing information disclosure or allowing for further exploitation.