Linux Kernel Integer Overflow Vulnerability in accel/qaic Component

An integer overflow vulnerability has been identified in the Linux kernel's accel/qaic component, specifically within the qaic_validate_req() function. This issue arises from u64 variables that are received from the user via the qaic_attach_slice_bo_ioctl() function. The vulnerability has been addressed by implementing check_add_overflow() to prevent potential integer wrapping errors.

Impact

Exploitation of this vulnerability could lead to incorrect calculations due to integer overflow, potentially allowing for memory corruption or other unintended behavior.