In the Linux kernel, the following vulnerability has been resolved:
ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans
There is a kernel API ntb_mw_clear_trans() would pass 0 to both addr and size. This would make xlate_pos negative.
[ 23.734156] switchtec switchtec0: MW 0: part 0 addr 0x0000000000000000 size 0x0000000000000000 [ 23.734158] ================================================================================ [ 23.734172] UBSAN: shift-out-of-bounds in drivers/ntb/hw/mscc/ntb_hw_switchtec.c:293:7 [ 23.734418] shift exponent -1 is negative
Ensuring xlate_pos is a positive or zero before BIT.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-modules-coreUpgrade kernelUpgrade kernel-rt-modules-extraUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-debug-coreUpgrade kernel-devel-matchedUpgrade python3-perfUpgrade kernel-rt-64k-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-rt-coreUpgrade kernel-rt-64k-modules-extraUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-cross-headersUpgrade kernel-develUpgrade kernel-uki-virt-addonsUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-64k-debug-develUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-modules-extraUpgrade kernel-64k-debug-modules-extraUpgrade kernel-64k-debug-modules-coreUpgrade kernel-tools-libs-develUpgrade kernel-headersUpgrade perfUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-64k-modules-coreUpgrade kernel-debugUpgrade kernel-tools-libsUpgrade kernel-64kUpgrade kernel-rt-debug-develUpgrade kernel-64k-modulesUpgrade kernel-rt-modulesUpgrade kernel-debug-develUpgrade kernel-zfcpdumpUpgrade kernel-docUpgrade rvUpgrade kernel-debug-uki-virtUpgrade kernel-toolsUpgrade kernel-debug-coreUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debugUpgrade kernel-uki-virtUpgrade kernel-64k-debug-modulesUpgrade rtlaUpgrade kernel-rt-64kUpgrade kernel-rt-64k-debug-coreUpgrade libperf | Feb 27, 2026 | Feb 16, 2026 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Apr 29, 2025 | Apr 16, 2025 |
| Oracle_linux | — | Upgrade kernel | Feb 24, 2026 | Apr 16, 2025 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Jul 9, 2025 | Apr 16, 2025 |
| Rocky_linux | — | Upgrade kernel-uki-virtUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade perf-debuginfoUpgrade libperfUpgrade kernel-zfcpdump-coreUpgrade kernel-uki-virt-addonsUpgrade kernel-zfcpdump-debuginfoUpgrade rvUpgrade kernel-rt-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-devel-matchedUpgrade perfUpgrade kernel-modules-coreUpgrade kernel-rt-modulesUpgrade kernel-debug-modules-extraUpgrade libperf-debuginfoUpgrade kernel-rt-modules-coreUpgrade kernel-toolsUpgrade kernel-debug-devel-matchedUpgrade kernel-debuginfo-common-s390xUpgrade kernel-rtUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdumpUpgrade kernel-rt-debugUpgrade kernel-debug-develUpgrade kernel-debug-debuginfoUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-coreUpgrade kernel-debugUpgrade kernel-tools-debuginfoUpgrade kernel-debug-uki-virtUpgrade rtlaUpgrade kernel-modules-extra-matchedUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-modulesUpgrade kernel-develUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-debuginfoUpgrade kernelUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perfUpgrade kernel-rt-debug-modulesUpgrade kernel-debuginfoUpgrade kernel-debug-modules-coreUpgrade kernel-debug-coreUpgrade python3-perf-debuginfoUpgrade kernel-rt-develUpgrade kernel-rt-debug-modules-coreUpgrade kernel-coreUpgrade kernel-rt-modules-extraUpgrade kernel-rt-core | Feb 26, 2026 | Feb 24, 2026 |
| Ubuntu | — | Upgrade linux-image-azure-cvmUpgrade linux-image-lowlatency-6.8Upgrade linux-image-6.11.0-1015-lowlatency-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-1083-gkeUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.11.0-28-generic-64kUpgrade linux-image-raspi2Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-azure-fips-6.8Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.8.0-1038-oracleUpgrade linux-image-realtimeUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-raspi-nolpaeUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-aws-64kUpgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-6.8.0-1041-nvidia-64kUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-86-lowlatencyUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-azure-6.11Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-1068-gkeopUpgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-5.15.0-1082-kvmUpgrade linux-image-5.4.0-1093-ibmUpgrade linux-image-oracleUpgrade linux-image-6.11.0-1018-azureUpgrade linux-image-6.8.0-1038-gke-64kUpgrade linux-image-5.15.0-1078-ibmUpgrade linux-image-generic-6.8Upgrade linux-image-5.15.0-1079-intel-iot-realtimeUpgrade linux-image-gcp-6.8Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-bluefieldUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-gkeUpgrade linux-image-5.4.0-1150-gcpUpgrade linux-image-fipsUpgrade linux-image-5.15.0-1080-raspiUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-142-lowlatencyUpgrade linux-image-5.15.0-1086-aws-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.11.0-28-genericUpgrade linux-image-raspi-realtimeUpgrade linux-image-azure-6.8Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-6.8.0-86-genericUpgrade linux-image-6.8.0-1041-raspiUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-1028-nvidia-tegra-igx-rtUpgrade linux-image-5.4.0-1147-awsUpgrade linux-image-oem-20.04Upgrade linux-image-oem-24.04bUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-awsUpgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.14.0-22-genericUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-6.11.0-1015-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1029-azure-nvidiaUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-6.11.0-1015-awsUpgrade linux-image-gke-5.15Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-ibm-classicUpgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-5.4.0-1152-azureUpgrade linux-image-6.11.0-1011-realtimeUpgrade linux-image-aws-fipsUpgrade linux-image-6.8.0-1044-azure-fipsUpgrade linux-image-5.4.0-218-lowlatencyUpgrade linux-image-ibm-6.8Upgrade linux-image-5.4.0-1065-xilinx-zynqmpUpgrade linux-image-5.15.0-142-generic-lpaeUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-86-generic-64kUpgrade linux-image-5.15.0-1085-gcpUpgrade linux-image-oem-22.04Upgrade linux-image-5.4.0-1145-oracleUpgrade linux-image-azure-fipsUpgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-lowlatency-6.11Upgrade linux-image-6.8.0-1041-awsUpgrade linux-image-kvmUpgrade linux-image-raspiUpgrade linux-image-azure-fde-6.11Upgrade linux-image-azureUpgrade linux-image-6.8.0-86-lowlatency-64kUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-1080-nvidia-lowlatencyUpgrade linux-image-nvidia-tegraUpgrade linux-image-5.15.0-1050-xilinx-zynqmpUpgrade linux-image-5.15.0-1039-nvidia-tegraUpgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-5.15.0-1086-aws-fipsUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-aws-64k-6.8Upgrade linux-image-6.14.0-1007-azureUpgrade linux-image-5.15.0-142-lowlatency-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1085-gcp-fipsUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-5.4.0-1130-raspiUpgrade linux-image-raspi-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-lowlatency-64k-6.11Upgrade linux-image-5.4.0-218-generic-lpaeUpgrade linux-image-gkeop-5.15Upgrade linux-image-oemUpgrade linux-image-6.8.0-1041-nvidia-lowlatencyUpgrade linux-image-6.11.0-1016-gcpUpgrade linux-image-intel-iotgUpgrade linux-image-5.15.0-1039-nvidia-tegra-rtUpgrade linux-image-5.4.0-1147-aws-fipsUpgrade linux-image-6.8.0-1042-gcpUpgrade linux-image-5.4.0-1150-gcp-fipsUpgrade linux-image-5.15.0-1086-realtimeUpgrade linux-image-generic-64kUpgrade linux-image-aws-6.8Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-virtual-6.8Upgrade linux-image-5.15.0-1028-nvidia-tegra-igxUpgrade linux-image-6.8.0-2032-raspi-realtimeUpgrade linux-image-gke-64kUpgrade linux-image-5.15.0-1091-azureUpgrade linux-image-oem-osp1Upgrade linux-image-aws-lts-24.04Upgrade linux-image-azure-nvidia-6.8Upgrade linux-image-6.11.0-1017-oracle-64kUpgrade linux-image-5.15.0-142-generic-64kUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gkeopUpgrade linux-image-5.15.0-1086-awsUpgrade linux-image-azure-lts-22.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.11.0-1014-raspiUpgrade linux-image-5.15.0-1080-nvidiaUpgrade linux-image-5.15.0-1081-intel-iotgUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-6.8.0-1038-oracle-64kUpgrade linux-image-gke-64k-6.8Upgrade linux-image-5.15.0-1083-intel-iotgUpgrade linux-image-5.4.0-1134-kvmUpgrade linux-image-6.8.0-1025-gkeopUpgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-azure-fde-edgeUpgrade linux-image-6.8.0-1039-ibmUpgrade linux-image-gke-6.8Upgrade linux-image-6.8.0-1041-azureUpgrade linux-image-5.4.0-1051-iotUpgrade linux-image-5.4.0-1153-azure-fipsUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.15.0-1083-oracleUpgrade linux-image-6.14.0-1007-awsUpgrade linux-image-oem-22.04bUpgrade linux-image-oem-22.04cUpgrade linux-image-oem-22.04dUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.11.0-1017-oracleUpgrade linux-image-oracle-6.8Upgrade linux-image-5.15.0-1091-azure-fipsUpgrade linux-image-nvidia-64kUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-5.15.0-142-genericUpgrade linux-image-oracle-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-gcp-fipsUpgrade linux-image-nvidiaUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-218-genericUpgrade linux-image-6.11.0-1016-gcp-64kUpgrade linux-image-gcp-64kUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.8.0-1038-gkeUpgrade linux-image-aws-lts-20.04Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.8.0-1041-nvidiaUpgrade linux-image-5.15.0-142-fipsUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-oem-20.04cUpgrade linux-image-6.8.0-1041-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1042-gcp-64kUpgrade linux-image-6.8.0-1041-aws-64kUpgrade linux-image-genericUpgrade linux-image-5.4.0-1106-bluefieldUpgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-6.11.0-1018-azure-fdeUpgrade linux-image-realtime-6.8.1Upgrade linux-image-intelUpgrade linux-image-oem-20.04dUpgrade linux-image-5.4.0-1121-fipsUpgrade linux-image-6.11.0-1024-oemUpgrade linux-image-6.8.1-1036-realtime | Jun 20, 2025 | Apr 16, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | Apr 16, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub