In the Linux kernel, the following vulnerability has been resolved:
blk-iocost: avoid out of bounds shift
UBSAN catches undefined behavior in blk-iocost, where sometimes iocg->delay is shifted right by a number that is too large, resulting in undefined behavior on some architectures.
[ 186.556576] ------------[ cut here ]------------ UBSAN: shift-out-of-bounds in block/blk-iocost.c:1366:23 shift exponent 64 is too large for 64-bit type 'u64' (aka 'unsigned long long') CPU: 16 PID: 0 Comm: swapper/16 Tainted: G S E N 6.9.0-0_fbk700_debug_rc2_kbuilder_0_gc85af715cac0 #1 Hardware name: Quanta Twin Lakes MP/Twin Lakes Passive MP, BIOS F09_3A23 12/08/2020 Call Trace: <IRQ> dump_stack_lvl+0x8f/0xe0 __ubsan_handle_shift_out_of_bounds+0x22c/0x280 iocg_kick_delay+0x30b/0x310 ioc_timer_fn+0x2fb/0x1f80 __run_timer_base+0x1b6/0x250 ...
Avoid that undefined behavior by simply taking the "delay = 0" branch if the shift is too large.
I am not sure what the symptoms of an undefined value delay will be, but I suspect it could be more than a little annoying to debug.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade perfUpgrade kernel-livepatch-5.10.217-205.860Upgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade bpftool-debuginfoUpgrade python-perfUpgrade kernel-tools-develUpgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-5.15.160-104.158Upgrade perf-debuginfo | Jun 12, 2024 | May 30, 2024 |
| Amazon_linux_2023 | — | Upgrade python3-perfUpgrade kernel-libbpf-develUpgrade kernelUpgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade perfUpgrade kernel-livepatch-6.1.91-99.172Upgrade kernel-tools-develUpgrade kernel-libbpf-staticUpgrade perf-debuginfoUpgrade kernel-headersUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-libbpfUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-develUpgrade kernel-modules-extraUpgrade kernel-debuginfoUpgrade python3-perf-debuginfo | Feb 17, 2025 | May 30, 2024 |
| Debian | — | Upgrade linux | Jun 4, 2024 | May 30, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftool | Oct 8, 2024 | May 30, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel | Oct 9, 2024 | May 30, 2024 |
| Suse | — | Upgrade dtb-caviumUpgrade dtb-renesasUpgrade kernel-64kb-develUpgrade kernel-debug-develUpgrade dlm-kmp-64kbUpgrade kernel-default-optionalUpgrade dtb-allwinnerUpgrade dtb-lgUpgrade cluster-md-kmp-rtUpgrade kernel-default-vdsoUpgrade kernel-azureUpgrade kernel-source-vanillaUpgrade gfs2-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-develUpgrade kselftests-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kernel-64kb-extraUpgrade kselftests-kmp-azureUpgrade kernel-rt-livepatchUpgrade kernel-azure-optionalUpgrade kernel-source-rtUpgrade kernel-rt-extraUpgrade kernel-rt-optionalUpgrade kernel-rt_debug-develUpgrade kernel-debugUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-obs-buildUpgrade dtb-alteraUpgrade gfs2-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade dtb-appleUpgrade kselftests-kmp-64kbUpgrade dtb-hisiliconUpgrade kernel-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-debug-vdsoUpgrade dtb-amdUpgrade kernel-develUpgrade dtb-freescaleUpgrade reiserfs-kmp-defaultUpgrade kernel-default-baseUpgrade dlm-kmp-rtUpgrade kernel-default-livepatch-develUpgrade reiserfs-kmp-64kbUpgrade dtb-xilinxUpgrade dtb-sprdUpgrade dtb-nvidiaUpgrade dtb-rockchipUpgrade kernel-devel-rtUpgrade kernel-default-livepatchUpgrade dtb-broadcomUpgrade kernel-obs-qaUpgrade kernel-zfcpdumpUpgrade kernel-default-develUpgrade cluster-md-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-64kbUpgrade kernel-rtUpgrade dtb-marvellUpgrade reiserfs-kmp-rtUpgrade kernel-symsUpgrade kernel-sourceUpgrade kernel-64kb-optionalUpgrade kernel-syms-rtUpgrade kernel-source-azureUpgrade kernel-default-extraUpgrade kernel-kvmsmallUpgrade kernel-docsUpgrade dlm-kmp-azureUpgrade kernel-rt_debugUpgrade kernel-rt-livepatch-develUpgrade kernel-macrosUpgrade kernel-devel-azureUpgrade dtb-mediatekUpgrade dtb-armUpgrade kselftests-kmp-defaultUpgrade kernel-docs-htmlUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rt-vdsoUpgrade dtb-amazonUpgrade kernel-azure-extraUpgrade cluster-md-kmp-defaultUpgrade gfs2-kmp-rtUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-vdsoUpgrade kernel-azure-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade dtb-apmUpgrade dtb-amlogicUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-kvmsmall-develUpgrade kernel-64kbUpgrade dtb-qcomUpgrade kernel-azure-develUpgrade dtb-socionextUpgrade dtb-exynos | Jul 10, 2024 | May 30, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-5.15.0-1050-gkeopUpgrade linux-image-oracleUpgrade linux-image-virtualUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-118-genericUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-5.15.0-118-lowlatency-64kUpgrade linux-image-5.15.0-1064-kvmUpgrade linux-image-5.15.0-118-lowlatencyUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1060-raspiUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-gkeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-5.15.0-1062-intel-iotgUpgrade linux-image-5.15.0-1067-awsUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-5.15.0-1066-gcpUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-awsUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-oem-20.04Upgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1062-nvidiaUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-gcpUpgrade linux-image-oem-24.04Upgrade linux-image-5.15.0-118-generic-64kUpgrade linux-image-5.15.0-1070-azure-fdeUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-kvmUpgrade linux-image-5.15.0-118-generic-lpaeUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-intelUpgrade linux-image-gke-5.15Upgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1064-gkeUpgrade linux-image-5.15.0-1062-nvidia-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-gkeopUpgrade linux-image-oem-20.04cUpgrade linux-image-oracle-64kUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-nvidiaUpgrade linux-image-azureUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1065-oracleUpgrade linux-image-azure-fdeUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-azure-lts-22.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-5.15.0-1070-azureUpgrade linux-image-oem-20.04bUpgrade linux-image-5.15.0-1060-ibmUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.8.0-1013-awsUpgrade linux-image-oem-24.04aUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-intel-iotgUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-nvidia-64kUpgrade linux-image-oem-20.04dUpgrade linux-image-nvidia-6.8Upgrade linux-image-genericUpgrade linux-image-6.8.0-40-lowlatency | Aug 9, 2024 | May 30, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | May 30, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub