In the Linux kernel, the following vulnerability has been resolved:
binfmt_misc: fix shift-out-of-bounds in check_special_flags
UBSAN reported a shift-out-of-bounds warning:
left shift of 1 by 31 places cannot be represented in type 'int' Call Trace: <TASK> __dump_stack lib/dump_stack.c:88 [inline] dump_stack_lvl+0x8d/0xcf lib/dump_stack.c:106 ubsan_epilogue+0xa/0x44 lib/ubsan.c:151 __ubsan_handle_shift_out_of_bounds+0x1e7/0x208 lib/ubsan.c:322 check_special_flags fs/binfmt_misc.c:241 [inline] create_entry fs/binfmt_misc.c:456 [inline] bm_register_write+0x9d3/0xa20 fs/binfmt_misc.c:654 vfs_write+0x11e/0x580 fs/read_write.c:582 ksys_write+0xcf/0x120 fs/read_write.c:637 do_syscall_x64 arch/x86/entry/common.c:50 [inline] do_syscall_64+0x34/0x80 arch/x86/entry/common.c:80 entry_SYSCALL_64_after_hwframe+0x63/0xcd RIP: 0033:0x4194e1
Since the type of Node's flags is unsigned long, we should define these macros with same type too.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade kernel-livepatch-4.14.304-226.531Upgrade kernel-livepatch-5.15.86-53.137Upgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-develUpgrade perf-debuginfoUpgrade bpftoolUpgrade kernel-livepatch-5.10.165-143.735Upgrade kernel-toolsUpgrade perfUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernelUpgrade kernel-tools-devel | May 20, 2026 | May 20, 2026 |
| Debian | — | Upgrade linux | Oct 6, 2025 | Oct 6, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libs | Jan 15, 2026 | Jan 13, 2026 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel | Dec 12, 2025 | Dec 11, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Oct 4, 2025 |
| Ubuntu | — | Upgrade linux-bluefieldUpgrade linux-riscv-5.15Upgrade linux-realtimeUpgrade linux-gcp-5.15Upgrade linux-aws-hweUpgrade linux-lowlatency-hwe-5.15Upgrade linux-fipsUpgrade linux-raspiUpgrade linux-oracle-5.4Upgrade linux-hwe-5.15Upgrade linux-lowlatencyUpgrade linux-aws-5.15Upgrade linux-azureUpgrade linux-awsUpgrade linux-gkeUpgrade linux-raspi-5.4Upgrade linux-aws-5.4Upgrade linux-nvidia-tegra-5.15Upgrade linux-nvidiaUpgrade linux-gkeopUpgrade linux-gcp-fipsUpgrade linux-azure-fde-5.15Upgrade linux-azure-5.15Upgrade linux-azure-fipsUpgrade linux-intel-iot-realtimeUpgrade linux-hwe-5.4Upgrade linux-ibmUpgrade linux-gcp-4.15Upgrade linux-azure-4.15Upgrade linux-intel-iotg-5.15Upgrade linux-hweUpgrade linuxUpgrade linux-iotUpgrade linux-gcpUpgrade linux-oracle-5.15Upgrade linux-xilinx-zynqmpUpgrade linux-kvmUpgrade linux-ibm-5.4Upgrade linux-gcp-5.4Upgrade linux-aws-fipsUpgrade linux-intel-iotgUpgrade linux-oracleUpgrade linux-azure-5.4 | Oct 10, 2025 | Oct 4, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 15, 2025 | Oct 4, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub