CVE-2023-52630

A vulnerability was found in the blk-iocost module of Linux Kernel, where a shift-out-of-bounds warning due to discrepancies in timestamp handling during CPU transitions in iocg_kick_delay(), occurred when called from a different CPU, @now could be earlier than @iocg->delay_at, triggering an out-of-bounds shift exponent error.

Mitigation

Red Hat has investigated whether a possible mitigation exists for this issue, and has not been able to identify a practical example. Please update the affected package as soon as possible.