Linux Kernel Out-of-Bounds Shift Vulnerability in TLB Invalidation

A vulnerability in the Linux kernel's Direct Rendering Manager (DRM) component, specifically within the Xe graphics driver, has been addressed. The issue arose during Translation Lookaside Buffer (TLB) invalidation when the specified range exceeded a certain limit, leading to an out-of-bounds shift error. This error was detected by the Undefined Behavior Sanitizer (UBSAN), indicating that the shift operation attempted to use an exponent larger than what the data type could accommodate. The vulnerability could potentially be exploited in scenarios where large range invalidations are performed, causing a shift-out-of-bounds condition that could disrupt normal operations.

Impact

The vulnerability could cause a shift-out-of-bounds error, which may lead to undefined behavior in the kernel, potentially allowing for memory corruption or other unintended consequences.