The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In the Linux kernel, the following vulnerability has been resolved:
capabilities: fix undefined behavior in bit shift for CAP_TO_MASK
Shifting signed 32-bit value by 31 bits is undefined, so changing significant bit to unsigned. The UBSAN warning calltrace like below:
UBSAN: shift-out-of-bounds in security/commoncap.c:1252:2 left shift of 1 by 31 places cannot be represented in type 'int' Call Trace: <TASK> dump_stack_lvl+0x7d/0xa5 dump_stack+0x15/0x1b ubsan_epilogue+0xe/0x4e __ubsan_handle_shift_out_of_bounds+0x1e7/0x20c cap_task_prctl+0x561/0x6f0 security_task_prctl+0x5a/0xb0 __x64_sys_prctl+0x61/0x8f0 do_syscall_64+0x58/0x80 entry_SYSCALL_64_after_hwframe+0x63/0xcd </TASK>
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade python-perfUpgrade kernel-livepatch-5.10.155-138.670Upgrade kernel-livepatch-5.15.79-51.138Upgrade perf-debuginfoUpgrade kernelUpgrade kernel-livepatch-4.14.301-224.520Upgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade bpftool | Jun 23, 2025 | May 1, 2025 |
| Debian | — | Upgrade linux | May 5, 2025 | May 1, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-tools | Jul 11, 2025 | May 1, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernelUpgrade kernel-abi-stablelists | Sep 25, 2025 | Jul 10, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 1, 2025 |
| Ubuntu | — | Upgrade linux-azure-5.4Upgrade linux-gcpUpgrade linux-azure-5.15Upgrade linux-raspiUpgrade linux-raspi-5.4Upgrade linux-fipsUpgrade linux-realtimeUpgrade linux-lowlatency-hwe-5.15Upgrade linux-intel-iotgUpgrade linux-iotUpgrade linux-gcp-fipsUpgrade linux-azure-4.15Upgrade linux-hweUpgrade linux-gcp-4.15Upgrade linux-azure-fdeUpgrade linux-gcp-5.15Upgrade linux-intel-iotg-5.15Upgrade linux-riscv-5.15Upgrade linux-oracleUpgrade linux-xilinx-zynqmpUpgrade linux-oracle-5.15Upgrade linux-hwe-5.4Upgrade linux-kvmUpgrade linux-azureUpgrade linux-aws-5.4Upgrade linux-bluefieldUpgrade linux-aws-fipsUpgrade linux-gkeopUpgrade linux-hwe-5.15Upgrade linux-aws-hweUpgrade linux-ibmUpgrade linux-nvidiaUpgrade linux-intel-iot-realtimeUpgrade linux-nvidia-tegra-5.15Upgrade linux-gkeUpgrade linux-lowlatencyUpgrade linux-ibm-5.4Upgrade linux-gcp-5.4Upgrade linux-oracle-5.4Upgrade linux-aws-5.15Upgrade linux-awsUpgrade linuxUpgrade linux-azure-fips | May 6, 2025 | May 1, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | May 1, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub