In the Linux kernel, the following vulnerability has been resolved:
iommufd/iova_bitmap: Fix shift-out-of-bounds in iova_bitmap_offset_to_index()
Resolve a UBSAN shift-out-of-bounds issue in iova_bitmap_offset_to_index() where shifting the constant "1" (of type int) by bitmap->mapped.pgshift (an unsigned long value) could result in undefined behavior.
The constant "1" defaults to a 32-bit "int", and when "pgshift" exceeds 31 (e.g., pgshift = 63) the shift operation overflows, as the result cannot be represented in a 32-bit type.
To resolve this, the constant is updated to "1UL", promoting it to an unsigned long type to match the operand's type.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernelUpgrade kernel-livepatch-6.1.129-138.220Upgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade python3-perfUpgrade bpftoolUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-libbpf-staticUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-libbpfUpgrade kernel-tools-debuginfoUpgrade kernel-modules-extraUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade perfUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64 | Jun 11, 2025 | Feb 27, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Mar 17, 2025 | Feb 27, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | May 13, 2026 | Feb 27, 2025 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Jul 9, 2025 | Feb 27, 2025 |
| Suse | — | Upgrade dtb-xilinxUpgrade kernel-64kb-develUpgrade kernel-debug-develUpgrade kernel-develUpgrade kernel-debugUpgrade ocfs2-kmp-azureUpgrade dtb-amdUpgrade gfs2-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade kernel-default-baseUpgrade dtb-renesasUpgrade kernel-64kb-extraUpgrade kernel-default-vdsoUpgrade kernel-64kb-optionalUpgrade dlm-kmp-rtUpgrade dtb-alteraUpgrade dtb-armUpgrade kernel-azure-optionalUpgrade dtb-allwinnerUpgrade kernel-default-optionalUpgrade dtb-hisiliconUpgrade ocfs2-kmp-defaultUpgrade dtb-sprdUpgrade kernel-devel-rtUpgrade cluster-md-kmp-rtUpgrade kernel-default-livepatch-develUpgrade kselftests-kmp-64kbUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade gfs2-kmp-azureUpgrade dtb-lgUpgrade dtb-mediatekUpgrade kernel-rt-develUpgrade kernel-source-azureUpgrade dtb-exynosUpgrade dtb-rockchipUpgrade dtb-caviumUpgrade kernel-sourceUpgrade reiserfs-kmp-defaultUpgrade dtb-qcomUpgrade kernel-default-base-rebuildUpgrade kernel-symsUpgrade dtb-broadcomUpgrade dtb-amlogicUpgrade gfs2-kmp-rtUpgrade kernel-azure-develUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-default-livepatchUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-syms-rtUpgrade kernel-kvmsmall-vdsoUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-rtUpgrade kernel-azure-vdsoUpgrade kernel-rt_debug-develUpgrade kernel-docs-htmlUpgrade dtb-socionextUpgrade kselftests-kmp-azureUpgrade kernel-source-rtUpgrade kernel-obs-buildUpgrade kernel-kvmsmall-develUpgrade kernel-default-develUpgrade dtb-nvidiaUpgrade kernel-kvmsmallUpgrade kselftests-kmp-defaultUpgrade kernel-debug-vdsoUpgrade kernel-azure-extraUpgrade kernel-64kbUpgrade dtb-freescaleUpgrade dtb-apmUpgrade dtb-amazonUpgrade kernel-syms-azureUpgrade kernel-obs-qaUpgrade kernel-macrosUpgrade kernel-devel-azureUpgrade cluster-md-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-extraUpgrade kernel-rtUpgrade dtb-appleUpgrade dlm-kmp-azureUpgrade kernel-source-vanillaUpgrade kernel-rt-vdsoUpgrade kernel-rt-optionalUpgrade kernel-default-extraUpgrade dlm-kmp-defaultUpgrade kernel-azureUpgrade kernel-rt_debugUpgrade cluster-md-kmp-azureUpgrade dtb-marvell | Mar 13, 2025 | Feb 27, 2025 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1034-azure-fdeUpgrade linux-image-6.8.0-1032-awsUpgrade linux-image-6.11.0-1014-lowlatency-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.11.0-1014-lowlatencyUpgrade linux-image-6.8.0-2026-raspi-realtimeUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-gcpUpgrade linux-image-oem-22.04cUpgrade linux-image-realtime-6.8.1Upgrade linux-image-aws-64k-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1028-gkeUpgrade linux-image-aws-64kUpgrade linux-image-6.8.0-64-lowlatency-64kUpgrade linux-image-kvmUpgrade linux-image-azure-6.8Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-azure-nvidiaUpgrade linux-image-6.11.0-1022-oemUpgrade linux-image-6.8.0-1031-nvidia-64kUpgrade linux-image-6.11.0-1015-gcpUpgrade linux-image-azure-fdeUpgrade linux-image-nvidia-64kUpgrade linux-image-6.11.0-1010-realtimeUpgrade linux-image-ibm-classicUpgrade linux-image-oem-24.04Upgrade linux-image-6.11.0-1013-raspiUpgrade linux-image-oracle-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-realtimeUpgrade linux-image-6.11.0-1015-gcp-64kUpgrade linux-image-6.11.0-1014-awsUpgrade linux-image-virtualUpgrade linux-image-raspi-6.8Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-azure-lts-24.04Upgrade linux-image-raspi-realtimeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1029-oracle-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-awsUpgrade linux-image-ibm-6.8Upgrade linux-image-oracle-6.8Upgrade linux-image-6.11.0-1016-oracleUpgrade linux-image-6.8.0-64-generic-64kUpgrade linux-image-6.8.0-1029-ibmUpgrade linux-image-raspiUpgrade linux-image-aws-6.8Upgrade linux-image-gke-6.8Upgrade linux-image-6.8.0-1034-azureUpgrade linux-image-gcp-64kUpgrade linux-image-6.11.0-1016-oracle-64kUpgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.8.0-64-lowlatencyUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1031-nvidiaUpgrade linux-image-6.8.0-1033-gcpUpgrade linux-image-aws-lts-24.04Upgrade linux-image-azureUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-22.04dUpgrade linux-image-generic-6.8Upgrade linux-image-6.8.0-1031-nvidia-lowlatency-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1032-aws-64kUpgrade linux-image-ibmUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-virtual-6.8Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-genericUpgrade linux-image-6.8.0-1031-oemUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-oem-24.04bUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-azure-nvidia-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-gcp-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-1015-gkeopUpgrade linux-image-6.11.0-1015-azureUpgrade linux-image-gkeopUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-oem-22.04aUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1029-oracleUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-64-genericUpgrade linux-image-6.8.1-1025-realtimeUpgrade linux-image-oracleUpgrade linux-image-6.11.0-26-generic-64kUpgrade linux-image-6.11.0-1015-azure-fdeUpgrade linux-image-6.8.0-1031-raspiUpgrade linux-image-lowlatency-6.8Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1022-azure-nvidiaUpgrade linux-image-6.11.0-26-genericUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1031-nvidia-lowlatencyUpgrade linux-image-azure-fde-6.8Upgrade linux-image-lowlatency-64kUpgrade linux-image-nvidiaUpgrade linux-image-oem-6.8Upgrade linux-image-6.8.0-1033-gcp-64kUpgrade linux-image-gcp-64k-6.8 | May 21, 2025 | Feb 27, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Feb 27, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub