Bug 2160096 - Kernel: A flaw in __rxrpc_set_rto in net/rxrpc/rtt.c can cause integer overflow
Summary: Kernel: A flaw in __rxrpc_set_rto in net/rxrpc/rtt.c can cause integer overflow
Keywords:
Status: CLOSED NOTABUG
Alias: None
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
medium
medium
Target Milestone: ---
Assignee: Red Hat Product Security
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks: 2160095
TreeView+ depends on / blocked
 
Reported: 2023-01-11 14:23 UTC by Rohit Keshri
Modified: 2026-03-03 23:26 UTC (History)
38 users (show)

Fixed In Version: kernel 5.16 RC1
Clone Of:
Environment:
Last Closed: 2023-01-13 11:30:38 UTC
Embargoed:

Attachments (Terms of Use)

Description Rohit Keshri 2023-01-11 14:23:59 UTC 
An issue was discovered in the Linux kernel through 5.14. __rxrpc_set_rto in net/rxrpc/rtt.c uses _usecs_to_jiffies() rather than usecs_to_jiffies() that can cause integer overflow.

Reference:
https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=acde891c243c1ed85b19d4d5042bdf00914f5739
Comment 1 Rohit Keshri 2023-01-11 14:37:33 UTC 
There was no shipped kernel version were seen affected with this problem. These files are not built in our source code.
Note You need to log in before you can comment on or make changes to this bug.