CVE-2024-35827

Name of the Vulnerable Software and Affected Versions: Linux kernel (affected versions not specified)

Description: The issue is related to an integer underflow in the io recvmsg mshot prep() function. The controllen variable is of type size t (unsigned long), and casting it to int could lead to an integer underflow. The check add overflow() function considers the type of the destination, which is int. If two positive values are added and the result cannot fit in an integer, it is counted as an overflow. However, if controllen is cast to int and turns negative, negative values can fit into an int type, so there is no overflow. This could potentially allow an attacker to execute arbitrary code.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.