CVE-2022-49870

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The issue concerns undefined behavior in bit shift for CAP TO MASK in the Linux kernel. Specifically, shifting a signed 32-bit value by 31 bits is undefined. To address this, the significant bit is changed to unsigned. This change resolves a UBSAN warning related to shift-out-of-bounds in security/commoncap.c. The warning is triggered by a left shift of 1 by 31 places that cannot be represented in type 'int'. The call trace includes functions such as cap task prctl and security task prctl, indicating the vulnerability's location in the kernel's capability and security modules.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.