Linux Kernel Asymmetric Key Handling Integer Overflow Vulnerability

A vulnerability in the Linux kernel's handling of asymmetric keys can lead to a buffer overflow. This issue arises from potential integer overflows when adding the lengths of binary blobs and the size of an asymmetric_key_id structure. The vulnerability allows for the copying of data from malicious X.509 certificate fields that may be excessively large, such as ASN.1 INTEGER serial numbers and issuer names. The problem has been addressed by using check_add_overflow() to prevent the overflow and returning an error pointer in case of an overflow condition.

Impact

Exploitation of this vulnerability could lead to a buffer overflow, which may be exploited to execute arbitrary code or cause a denial-of-service condition.