In the Linux kernel, the following vulnerability has been resolved:
x86/MCE/AMD: Use an u64 for bank_map
Thee maximum number of MCA banks is 64 (MAX_NR_BANKS), see
a0bc32b3cacf ("x86/mce: Increase maximum number of banks to 64").
However, the bank_map which contains a bitfield of which banks to initialize is of type unsigned int and that overflows when those bit numbers are >= 32, leading to UBSAN complaining correctly:
UBSAN: shift-out-of-bounds in arch/x86/kernel/cpu/mce/amd.c:1365:38 shift exponent 32 is too large for 32-bit type 'int'
Change the bank_map to a u64 and use the proper BIT_ULL() macro when modifying bits in there.
[ bp: Rewrite commit message. ]
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade bpftoolUpgrade kernel-toolsUpgrade perfUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.15.117-72.142Upgrade kernel-livepatch-5.10.184-174.730Upgrade python-perf-debuginfoUpgrade kernel-headersUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade bpftool-debuginfo | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perfUpgrade perfUpgrade kernel-headersUpgrade kernel-tools-develUpgrade kernel-livepatch-6.1.29-47.49Upgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-libbpfUpgrade kernel-develUpgrade kernelUpgrade bpftoolUpgrade kernel-libbpf-develUpgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-x86_64 | Oct 16, 2025 | Oct 1, 2025 |
| Debian | — | Upgrade linux | Oct 3, 2025 | Oct 3, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Oct 1, 2025 |
| Ubuntu | — | Upgrade linux-gcp-5.15Upgrade linux-hwe-5.15Upgrade linux-bluefieldUpgrade linux-azureUpgrade linux-ibmUpgrade linux-gkeopUpgrade linux-nvidia-tegra-igxUpgrade linux-azure-5.15Upgrade linux-awsUpgrade linux-kvmUpgrade linux-oracleUpgrade linux-intel-iot-realtimeUpgrade linux-gcpUpgrade linux-intel-iotg-5.15Upgrade linux-intel-iotgUpgrade linux-oracle-5.15Upgrade linux-lowlatencyUpgrade linux-raspiUpgrade linux-gkeUpgrade linux-nvidia-tegra-5.15Upgrade linux-nvidia-tegraUpgrade linuxUpgrade linux-realtimeUpgrade linux-xilinx-zynqmpUpgrade linux-aws-5.15Upgrade linux-nvidiaUpgrade linux-lowlatency-hwe-5.15Upgrade linux-azure-fdeUpgrade linux-ibm-5.15Upgrade linux-riscv-5.15 | Oct 10, 2025 | Oct 1, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 15, 2025 | Oct 1, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub