CVE-2024-26884

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: The issue is related to an integer overflow in the hashtab code of the Linux kernel on 32-bit architectures. The hashtab code uses the roundup pow of two() function to compute the number of hash buckets and contains an overflow check. However, on 32-bit architectures, the roundup code itself can overflow due to a 32-bit left-shift of an unsigned long value, which is undefined behavior. This was triggered by syzbot on the DEVMAP HASH type. The exploitation of this issue may allow an attacker to impact the confidentiality, integrity, and availability of protected information.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.