Linux Kernel Out-of-Bounds Access Vulnerability in ICE Queue Quanta Validation

A vulnerability in the Linux kernel's ICE (Intelligent Controller Engine) component has been addressed. The issue involved improper validation of queue quanta parameters, which could lead to out-of-bounds access. The vulnerability allowed for queue wraparound in quanta configuration, potentially causing unintended behavior. The fix ensures that the end queue ID does not overflow by validating the start queue ID and the number of queues.

Impact

Exploitation of this vulnerability could lead to out-of-bounds access, potentially allowing for memory corruption or other unintended consequences.