In the Linux kernel, the following vulnerability has been resolved:
ntb_hw_switchtec: Fix shift-out-of-bounds in switchtec_ntb_mw_set_trans
There is a kernel API ntb_mw_clear_trans() would pass 0 to both addr and size. This would make xlate_pos negative.
[ 23.734156] switchtec switchtec0: MW 0: part 0 addr 0x0000000000000000 size 0x0000000000000000 [ 23.734158] ================================================================================ [ 23.734172] UBSAN: shift-out-of-bounds in drivers/ntb/hw/mscc/ntb_hw_switchtec.c:293:7 [ 23.734418] shift exponent -1 is negative
Ensuring xlate_pos is a positive or zero before BIT.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-coreUpgrade kernel-coreUpgrade kernel-rt-debug-coreUpgrade kernel-64k-develUpgrade kernel-rt-debug-develUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-64k-modulesUpgrade kernel-debug-uki-virtUpgrade kernel-rt-64k-modules-coreUpgrade kernel-rt-develUpgrade kernel-rt-debugUpgrade kernel-rt-debug-modules-extraUpgrade kernel-64k-coreUpgrade rtlaUpgrade kernel-rt-modulesUpgrade kernel-modules-coreUpgrade kernel-tools-libsUpgrade kernel-rt-debug-modules-coreUpgrade kernel-modulesUpgrade rvUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-64k-debug-develUpgrade kernel-rt-64k-coreUpgrade kernel-uki-virtUpgrade kernel-rt-64k-develUpgrade kernel-debug-modules-coreUpgrade kernel-64k-debug-modulesUpgrade kernel-debug-develUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdump-develUpgrade kernel-docUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debugUpgrade kernel-debug-modules-extraUpgrade kernel-debug-modulesUpgrade python3-perfUpgrade kernel-rt-64kUpgrade kernel-rt-64k-debug-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-cross-headersUpgrade kernel-rt-64k-modules-extraUpgrade kernel-64k-debug-coreUpgrade kernel-abi-stablelistsUpgrade kernel-devel-matchedUpgrade kernel-rt-64k-modulesUpgrade perfUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-coreUpgrade kernel-64k-debug-modules-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-debug-modules-extraUpgrade kernel-develUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-64k-debug-develUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-modules-extraUpgrade kernel-headersUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernelUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-modules-extraUpgrade libperfUpgrade kernel-debug-devel-matchedUpgrade kernel-tools-libs-devel | Feb 27, 2026 | Feb 16, 2026 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Apr 29, 2025 | Apr 16, 2025 |
| Oracle_linux | — | Upgrade kernel | Feb 24, 2026 | Apr 16, 2025 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Jul 9, 2025 | Apr 16, 2025 |
| Rocky_linux | — | Upgrade rtlaUpgrade python3-perf-debuginfoUpgrade kernel-develUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-zfcpdump-develUpgrade kernel-tools-libsUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-debuginfoUpgrade kernel-debugUpgrade kernel-tools-debuginfoUpgrade kernel-debug-uki-virtUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-develUpgrade kernel-coreUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debug-modules-coreUpgrade python3-perfUpgrade kernel-modules-extraUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-modules-coreUpgrade kernel-debug-coreUpgrade kernel-rt-coreUpgrade kernel-debuginfoUpgrade kernel-rt-debugUpgrade kernel-zfcpdumpUpgrade kernel-debug-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-modules-extra-matchedUpgrade kernel-modulesUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-coreUpgrade perfUpgrade kernel-uki-virtUpgrade kernel-debug-devel-matchedUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-rt-modulesUpgrade kernel-devel-matchedUpgrade kernel-rt-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-modules-coreUpgrade kernel-rtUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debuginfoUpgrade kernel-zfcpdump-debuginfoUpgrade libperf-debuginfoUpgrade kernel-uki-virt-addonsUpgrade libperfUpgrade rvUpgrade kernel-tools-libs-develUpgrade kernel-debuginfo-common-s390x | Feb 26, 2026 | Feb 24, 2026 |
| Ubuntu | — | Upgrade linux-image-5.15.0-142-lowlatencyUpgrade linux-image-gke-5.15Upgrade linux-image-6.11.0-1011-realtimeUpgrade linux-image-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-raspi2Upgrade linux-image-6.11.0-1015-awsUpgrade linux-image-generic-64k-6.8Upgrade linux-image-aws-lts-22.04Upgrade linux-image-aws-fipsUpgrade linux-image-5.4.0-1145-oracleUpgrade linux-image-azure-cvmUpgrade linux-image-6.11.0-1015-lowlatencyUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-86-genericUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oracleUpgrade linux-image-5.15.0-1068-gkeopUpgrade linux-image-6.8.0-86-lowlatencyUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1041-raspiUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-awsUpgrade linux-image-5.15.0-1086-aws-64kUpgrade linux-image-5.15.0-1082-kvmUpgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-6.11.0-28-genericUpgrade linux-image-6.8.0-1038-gke-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.4.0-1093-ibmUpgrade linux-image-bluefieldUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.4.0-1065-xilinx-zynqmpUpgrade linux-image-5.4.0-1147-awsUpgrade linux-image-lowlatency-6.11Upgrade linux-image-5.15.0-1078-ibmUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.11.0-28-generic-64kUpgrade linux-image-6.11.0-1015-lowlatency-64kUpgrade linux-image-6.8.0-1038-oracleUpgrade linux-image-6.8.0-1044-azure-fipsUpgrade linux-image-azure-6.11Upgrade linux-image-virtualUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-oem-24.04bUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.14.0-22-genericUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-6.8.0-1041-nvidia-64kUpgrade linux-image-azure-fips-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-realtimeUpgrade linux-image-ibm-classicUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-ibm-6.8Upgrade linux-image-5.4.0-1150-gcpUpgrade linux-image-6.14.0-1007-oracle-64kUpgrade linux-image-5.15.0-1085-gcpUpgrade linux-image-gcp-6.8Upgrade linux-image-6.11.0-1018-azureUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1079-intel-iot-realtimeUpgrade linux-image-5.15.0-1083-gkeUpgrade linux-image-azure-6.8Upgrade linux-image-6.14.0-1007-oracleUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-azure-fipsUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-raspi-realtimeUpgrade linux-image-5.4.0-1152-azureUpgrade linux-image-azure-lts-24.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-gkeUpgrade linux-image-oem-22.04Upgrade linux-image-fipsUpgrade linux-image-6.8.0-86-generic-64kUpgrade linux-image-5.15.0-142-generic-lpaeUpgrade linux-image-nvidia-tegra-igxUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-5.4.0-218-lowlatencyUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.14.0-1007-azure-fdeUpgrade linux-image-5.15.0-1080-raspiUpgrade linux-image-aws-64kUpgrade linux-image-azure-lts-20.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-5.15.0-1028-nvidia-tegra-igx-rtUpgrade linux-image-6.14.0-1004-realtimeUpgrade linux-image-6.8.0-1029-azure-nvidiaUpgrade linux-image-oem-22.04aUpgrade linux-image-6.14.0-22-generic-64kUpgrade linux-image-generic-6.8Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-oem-22.04cUpgrade linux-image-oem-22.04bUpgrade linux-image-6.14.0-1007-awsUpgrade linux-image-azure-fde-edgeUpgrade linux-image-6.11.0-1016-gcpUpgrade linux-image-oracle-6.8Upgrade linux-image-oem-22.04dUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1038-oracle-64kUpgrade linux-image-5.4.0-218-genericUpgrade linux-image-5.15.0-142-genericUpgrade linux-image-5.15.0-1039-nvidia-tegraUpgrade linux-image-5.15.0-1083-oracleUpgrade linux-image-aws-6.8Upgrade linux-image-6.14.0-1008-gcpUpgrade linux-image-gke-6.8Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-1153-azure-fipsUpgrade linux-image-5.4.0-1147-aws-fipsUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-5.15.0-1083-intel-iotgUpgrade linux-image-oracle-64kUpgrade linux-image-gke-64kUpgrade linux-image-5.15.0-1028-nvidia-tegra-igxUpgrade linux-image-5.15.0-142-generic-64kUpgrade linux-image-5.15.0-1086-realtimeUpgrade linux-image-6.8.0-2032-raspi-realtimeUpgrade linux-image-azureUpgrade linux-image-5.15.0-1091-azureUpgrade linux-image-oem-20.04dUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-virtual-6.8Upgrade linux-image-5.4.0-1051-iotUpgrade linux-image-generic-64kUpgrade linux-image-gcp-fipsUpgrade linux-image-6.8.0-1039-ibmUpgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-oem-osp1Upgrade linux-image-5.4.0-1150-gcp-fipsUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-1050-xilinx-zynqmpUpgrade linux-image-6.8.0-86-lowlatency-64kUpgrade linux-image-azure-fdeUpgrade linux-image-6.11.0-1024-oemUpgrade linux-image-5.15.0-142-lowlatency-64kUpgrade linux-image-5.15.0-1080-nvidia-lowlatencyUpgrade linux-image-nvidia-tegraUpgrade linux-image-raspi-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-6.8.1-1036-realtimeUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-5.4.0-1130-raspiUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1041-azureUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-gke-64k-6.8Upgrade linux-image-kvmUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-5.15.0-1080-nvidiaUpgrade linux-image-6.8.0-1038-gkeUpgrade linux-image-5.15.0-142-fipsUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-6.11.0-1014-raspiUpgrade linux-image-oem-20.04cUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1041-nvidiaUpgrade linux-image-6.8.0-1041-aws-64kUpgrade linux-image-6.8.0-1041-nvidia-lowlatency-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-nvidiaUpgrade linux-image-lowlatency-64k-6.11Upgrade linux-image-5.4.0-1121-fipsUpgrade linux-image-oem-20.04bUpgrade linux-image-6.8.0-1025-gkeopUpgrade linux-image-azure-fde-6.11Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-6.8.0-1041-nvidia-lowlatencyUpgrade linux-image-5.4.0-218-generic-lpaeUpgrade linux-image-6.8.0-1041-awsUpgrade linux-image-azure-nvidia-6.8Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-1086-awsUpgrade linux-image-5.15.0-1085-gcp-fipsUpgrade linux-image-oemUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gkeopUpgrade linux-image-6.14.0-1008-gcp-64kUpgrade linux-image-aws-64k-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1039-nvidia-tegra-rtUpgrade linux-image-aws-lts-24.04Upgrade linux-image-intel-iotgUpgrade linux-image-realtime-6.8.1Upgrade linux-image-6.14.0-1007-raspiUpgrade linux-image-5.15.0-1081-intel-iotgUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-raspiUpgrade linux-image-6.14.0-1007-aws-64kUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-intelUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-6.11.0-1016-gcp-64kUpgrade linux-image-6.8.0-1042-gcpUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-5.15.0-1091-azure-fipsUpgrade linux-image-azure-lts-22.04Upgrade linux-image-genericUpgrade linux-image-6.11.0-1017-oracle-64kUpgrade linux-image-6.11.0-1018-azure-fdeUpgrade linux-image-5.15.0-1086-aws-fipsUpgrade linux-image-6.14.0-1007-azureUpgrade linux-image-6.8.0-1042-gcp-64kUpgrade linux-image-5.4.0-1106-bluefieldUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-5.4.0-1134-kvmUpgrade linux-image-6.11.0-1017-oracle | Jun 20, 2025 | Apr 16, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | Apr 16, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub