Linux Kernel iSCSI Boot IPv6 Subnet Mask Shift-Out-Of-Bounds Vulnerability

A vulnerability in the Linux kernel's iSCSI boot process over IPv6 has been identified. The issue arises because 'iscsistart' reads the subnet mask entry from the iBFT firmware, which is not applicable to IPv6. This discrepancy causes a shift-out-of-bounds error, triggering a UBSAN warning. The vulnerability affects several Linux kernel versions.

Impact

Exploitation of this vulnerability causes a shift-out-of-bounds error, which can lead to undefined behavior in the program, potentially allowing for memory corruption or other unintended consequences.