In the Linux kernel, the following vulnerability has been resolved:
RDMA/umem: Be careful about boundary conditions in ib_umem_find_best_pgsz()
Several corner cases, especially important on 32 bits:
– umem->iova is u64, the function argument should pass in u64 or
iova will be truncated
– Check that the length is not too large for the iova
– Check that lengths > 4G don’t overflow the GENMASK
