Threats tagged 'ghsa-66x6-php2-c8mm'

CVE-2024-49933 addresses out-of-bound shift operations in the Linux kernel's blk_iocost subsystem. The issue was detected by UBSAN, which flagged shift exponents exceeding the bit width of the 64-bit unsigned integer type. Although no direct impact has been identified, the undefined behavior could potentially affect kernel stability. The fix involves precalculating the shift exponent to ensure it does not exceed the maximum allowed bits, preventing out-of-bound shifts.