In the Linux kernel, the following vulnerability has been resolved:
scsi: ufs: exynos: Fix programming of HCI_UTRL_NEXUS_TYPE
On Google gs101, the number of UTP transfer request slots (nutrs) is 32, and in this case the driver ends up programming the UTRL_NEXUS_TYPE incorrectly as 0.
This is because the left hand side of the shift is 1, which is of type int, i.e. 31 bits wide. Shifting by more than that width results in undefined behaviour.
Fix this by switching to the BIT() macro, which applies correct type casting as required. This ensures the correct value is written to UTRL_NEXUS_TYPE (0xffffffff on gs101), and it also fixes a UBSAN shift warning:
UBSAN: shift-out-of-bounds in drivers/ufs/host/ufs-exynos.c:1113:21 shift exponent 32 is too large for 32-bit type 'int'
For consistency, apply the same change to the nutmrs / UTMRL_NEXUS_TYPE write.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade perfUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.10.242-239.961Upgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernelUpgrade python-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-devel | May 20, 2026 | May 20, 2026 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Sep 25, 2025 | Sep 25, 2025 |
| Suse | — | Upgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade dtb-marvellUpgrade dtb-appleUpgrade kernel-default-livepatch-develUpgrade kernel-source-vanillaUpgrade kernel-rt-vdsoUpgrade kernel-develUpgrade kernel-rt-livepatchUpgrade dtb-lgUpgrade dlm-kmp-rtUpgrade dtb-allwinnerUpgrade kernel-obs-buildUpgrade kernel-rt-optionalUpgrade kernel-default-livepatchUpgrade kernel-default-optionalUpgrade kernel-kvmsmall-vdsoUpgrade ocfs2-kmp-defaultUpgrade dtb-alteraUpgrade dtb-caviumUpgrade dtb-nvidiaUpgrade kernel-64kb-extraUpgrade dtb-renesasUpgrade dtb-freescaleUpgrade kernel-rt-extraUpgrade cluster-md-kmp-rtUpgrade dtb-broadcomUpgrade kselftests-kmp-64kbUpgrade dtb-qcomUpgrade dtb-xilinxUpgrade kernel-obs-qaUpgrade kernel-symsUpgrade kernel-rtUpgrade dtb-rockchipUpgrade kernel-sourceUpgrade kernel-rt-develUpgrade kernel-docsUpgrade kernel-macrosUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-64kbUpgrade dtb-amdUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-rtUpgrade dtb-mediatekUpgrade dtb-hisiliconUpgrade kselftests-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmallUpgrade kernel-64kbUpgrade dtb-apmUpgrade dtb-amazonUpgrade dtb-socionextUpgrade ocfs2-kmp-rtUpgrade kernel-default-develUpgrade dtb-amlogicUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-develUpgrade cluster-md-kmp-defaultUpgrade dtb-armUpgrade dlm-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-default-extraUpgrade dlm-kmp-64kbUpgrade kernel-default-vdsoUpgrade dtb-sprdUpgrade kernel-docs-htmlUpgrade dtb-exynosUpgrade kernel-default | Dec 5, 2025 | Nov 6, 2025 |
| Ubuntu | — | Upgrade linux-image-gke-6.8Upgrade linux-image-gkeopUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-gke-5.15Upgrade linux-image-ibmUpgrade linux-image-oem-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-raspi-realtimeUpgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-nvidia-tegraUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-fips-5.15Upgrade linux-image-lowlatency-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-5.15.0-1101-azure-fipsUpgrade linux-image-5.15.0-1096-realtimeUpgrade linux-image-gkeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1080-gkeopUpgrade linux-image-5.15.0-163-generic-64kUpgrade linux-image-5.15.0-1097-aws-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-nvidiaUpgrade linux-image-genericUpgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-azure-5.15Upgrade linux-image-5.15.0-1091-ibmUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-awsUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1049-nvidia-tegraUpgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-gcp-64kUpgrade linux-image-azure-cvmUpgrade linux-image-gcp-fips-5.15Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-5.15.0-163-lowlatencyUpgrade linux-image-oracle-6.8Upgrade linux-image-oracle-5.15Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-gke-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-163-fipsUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gcp-5.15Upgrade linux-image-aws-fipsUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-gkeop-5.15Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-aws-6.8Upgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1051-azureUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-5.15.0-163-lowlatency-64kUpgrade linux-image-5.15.0-163-generic-lpaeUpgrade linux-image-5.15.0-1102-azureUpgrade linux-image-5.15.0-1038-nvidia-tegra-igx-rtUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-raspi-6.8Upgrade linux-image-raspiUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-nvidia-6.8Upgrade linux-image-aws-fips-5.15Upgrade linux-image-gcp-fipsUpgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1097-gcpUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-raspi-nolpaeUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-azureUpgrade linux-image-5.15.0-1038-nvidia-tegra-igxUpgrade linux-image-virtual-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-generic-64k-5.15Upgrade linux-image-aws-64k-5.15Upgrade linux-image-azure-fips-5.15Upgrade linux-image-generic-64k-6.8Upgrade linux-image-5.15.0-1097-gcp-fipsUpgrade linux-image-lowlatency-5.15Upgrade linux-image-realtime-6.8.1Upgrade linux-image-ibm-5.15Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-xilinx-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-fipsUpgrade linux-image-5.15.0-1049-nvidia-tegra-rtUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-generic-5.15Upgrade linux-image-generic-6.8Upgrade linux-image-oem-20.04bUpgrade linux-image-realtime-5.15Upgrade linux-image-5.15.0-1061-xilinx-zynqmpUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1101-azureUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-5.15.0-1097-awsUpgrade linux-image-5.15.0-1097-aws-fipsUpgrade linux-image-5.15.0-1092-nvidia-lowlatencyUpgrade linux-image-intelUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-azure-lts-24.04Upgrade linux-image-5.15.0-1093-gkeUpgrade linux-image-5.15.0-1092-intel-iotgUpgrade linux-image-ibm-6.8Upgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-5.15.0-163-genericUpgrade linux-image-virtualUpgrade linux-image-oem-20.04cUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-6.8.0-100-genericUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-azure-lts-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-gcpUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-azure-6.8Upgrade linux-image-raspi-5.15Upgrade linux-image-5.15.0-1094-oracleUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-5.15.0-1089-kvmUpgrade linux-image-realtimeUpgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oracle-64kUpgrade linux-image-nvidia-5.15Upgrade linux-image-lowlatencyUpgrade linux-image-ibm-classicUpgrade linux-image-gcp-fips-6.8Upgrade linux-image-aws-fips-6.8Upgrade linux-image-aws-5.15Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-xilinxUpgrade linux-image-5.15.0-1089-intel-iot-realtimeUpgrade linux-image-virtual-5.15Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-aws-64k | Dec 5, 2025 | Sep 11, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 19, 2025 | Sep 11, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub