In the Linux kernel, the following vulnerability has been resolved:
iommufd/iova_bitmap: Fix shift-out-of-bounds in iova_bitmap_offset_to_index()
Resolve a UBSAN shift-out-of-bounds issue in iova_bitmap_offset_to_index() where shifting the constant "1" (of type int) by bitmap->mapped.pgshift (an unsigned long value) could result in undefined behavior.
The constant "1" defaults to a 32-bit "int", and when "pgshift" exceeds 31 (e.g., pgshift = 63) the shift operation overflows, as the result cannot be represented in a 32-bit type.
To resolve this, the constant is updated to "1UL", promoting it to an unsigned long type to match the operand's type.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-debuginfoUpgrade kernel-headersUpgrade perfUpgrade kernel-toolsUpgrade kernel-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-libbpfUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-6.1.129-138.220Upgrade kernel-tools-develUpgrade kernelUpgrade bpftoolUpgrade python3-perf-debuginfoUpgrade python3-perfUpgrade kernel-modules-extra-commonUpgrade kernel-libbpf-develUpgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-x86_64 | Jun 11, 2025 | Feb 27, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Mar 17, 2025 | Feb 27, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | May 13, 2026 | Feb 27, 2025 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Jul 9, 2025 | Feb 27, 2025 |
| Suse | — | Upgrade kernel-symsUpgrade kernel-default-base-rebuildUpgrade dtb-qcomUpgrade gfs2-kmp-64kbUpgrade kernel-debugUpgrade kernel-default-livepatch-develUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-rtUpgrade kernel-rt-develUpgrade kernel-debug-develUpgrade reiserfs-kmp-defaultUpgrade kernel-devel-rtUpgrade kernel-source-azureUpgrade dtb-rockchipUpgrade dtb-xilinxUpgrade dtb-exynosUpgrade kernel-64kb-develUpgrade ocfs2-kmp-defaultUpgrade dtb-caviumUpgrade kernel-develUpgrade dtb-renesasUpgrade kernel-default-baseUpgrade kernel-sourceUpgrade gfs2-kmp-defaultUpgrade dtb-allwinnerUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-64kbUpgrade dtb-lgUpgrade dtb-hisiliconUpgrade dtb-sprdUpgrade gfs2-kmp-azureUpgrade dtb-mediatekUpgrade kselftests-kmp-64kbUpgrade dtb-amdUpgrade reiserfs-kmp-azureUpgrade kernel-default-optionalUpgrade kernel-64kb-optionalUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-azureUpgrade dtb-alteraUpgrade kernel-default-vdsoUpgrade kernel-64kb-extraUpgrade dtb-armUpgrade kernel-azure-extraUpgrade dtb-broadcomUpgrade dtb-amlogicUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-azureUpgrade kernel-source-vanillaUpgrade kernel-rt_debugUpgrade kernel-rt-vdsoUpgrade kernel-rt-optionalUpgrade kselftests-kmp-rtUpgrade kernel-syms-azureUpgrade cluster-md-kmp-defaultUpgrade kernel-kvmsmall-vdsoUpgrade kernel-zfcpdumpUpgrade kernel-default-develUpgrade dtb-nvidiaUpgrade dtb-socionextUpgrade kernel-docs-htmlUpgrade kernel-azure-vdsoUpgrade kernel-rt_debug-develUpgrade kernel-source-rtUpgrade kernel-obs-buildUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmall-develUpgrade kselftests-kmp-azureUpgrade dtb-amazonUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade gfs2-kmp-rtUpgrade kernel-kvmsmallUpgrade kernel-debug-vdsoUpgrade dtb-freescaleUpgrade dtb-apmUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-default-livepatchUpgrade kernel-defaultUpgrade kernel-64kbUpgrade dtb-appleUpgrade dlm-kmp-azureUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-extraUpgrade kernel-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-macrosUpgrade kernel-obs-qaUpgrade kernel-devel-azureUpgrade kernel-syms-rtUpgrade kernel-docsUpgrade kernel-default-extraUpgrade kernel-azureUpgrade dtb-marvellUpgrade kernel-azure-devel | Mar 13, 2025 | Feb 27, 2025 |
| Ubuntu | — | Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1022-azure-nvidiaUpgrade linux-image-oem-24.04bUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-genericUpgrade linux-image-lowlatency-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-virtual-6.8Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-ibmUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1031-raspiUpgrade linux-image-oem-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-gkeopUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-gcp-6.8Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-6.11.0-1015-azureUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.11.0-26-generic-64kUpgrade linux-image-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1029-oracleUpgrade linux-image-6.11.0-1015-azure-fdeUpgrade linux-image-6.8.0-1031-oemUpgrade linux-image-azure-nvidia-6.8Upgrade linux-image-6.8.0-1032-aws-64kUpgrade linux-image-azure-fde-6.8Upgrade linux-image-6.8.0-1031-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1015-gkeopUpgrade linux-image-6.8.0-1033-gcp-64kUpgrade linux-image-gkeUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-64-genericUpgrade linux-image-nvidia-6.8Upgrade linux-image-oem-6.8Upgrade linux-image-6.8.0-1031-nvidia-lowlatencyUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.11.0-26-genericUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.1-1025-realtimeUpgrade linux-image-nvidiaUpgrade linux-image-lowlatency-64kUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-generic-64kUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-gcp-64kUpgrade linux-image-aws-6.8Upgrade linux-image-6.11.0-1014-lowlatencyUpgrade linux-image-6.8.0-1034-azure-fdeUpgrade linux-image-6.8.0-1032-awsUpgrade linux-image-6.8.0-1029-oracle-64kUpgrade linux-image-raspiUpgrade linux-image-6.8.0-64-lowlatencyUpgrade linux-image-6.8.0-2026-raspi-realtimeUpgrade linux-image-6.8.0-64-lowlatency-64kUpgrade linux-image-aws-64kUpgrade linux-image-6.8.0-1031-nvidiaUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-realtime-6.8.1Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.8.0-1028-gkeUpgrade linux-image-6.11.0-1016-oracle-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-azure-nvidiaUpgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-azure-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-kvmUpgrade linux-image-awsUpgrade linux-image-gke-6.8Upgrade linux-image-6.11.0-1015-gcp-64kUpgrade linux-image-oracle-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1033-gcpUpgrade linux-image-6.8.0-64-generic-64kUpgrade linux-image-6.8.0-1029-ibmUpgrade linux-image-6.11.0-1016-oracleUpgrade linux-image-aws-lts-24.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-azureUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.11.0-1013-raspiUpgrade linux-image-oem-24.04aUpgrade linux-image-6.11.0-1014-awsUpgrade linux-image-generic-6.8Upgrade linux-image-6.11.0-1022-oemUpgrade linux-image-oem-22.04cUpgrade linux-image-oracle-64kUpgrade linux-image-generic-64k-6.8Upgrade linux-image-6.11.0-1014-lowlatency-64kUpgrade linux-image-6.8.0-1034-azureUpgrade linux-image-6.11.0-1015-gcpUpgrade linux-image-ibm-classicUpgrade linux-image-6.11.0-1010-realtimeUpgrade linux-image-raspi-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1031-nvidia-64kUpgrade linux-image-azure-fdeUpgrade linux-image-oem-24.04Upgrade linux-image-ibm-6.8Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-azure-lts-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-virtualUpgrade linux-image-nvidia-64kUpgrade linux-image-realtime | May 21, 2025 | Feb 27, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Feb 27, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub