In the Linux kernel, the following vulnerability has been resolved:
scsi: ufs: core: Fix shift issue in ufshcd_clear_cmd()
When task_tag >= 32 (in MCQ mode) and sizeof(unsigned int) == 4, 1U << task_tag will out of bounds for a u32 mask. Fix this up to prevent SHIFT_ISSUE (bitwise shifts that are out of bounds for their data type).
[name:debug_monitors&]Unexpected kernel BRK exception at EL1 [name:traps&]Internal error: BRK handler: 00000000f2005514 [#1] PREEMPT SMP [name:mediatek_cpufreq_hw&]cpufreq stop DVFS log done [name:mrdump&]Kernel Offset: 0x1ba5800000 from 0xffffffc008000000 [name:mrdump&]PHYS_OFFSET: 0x80000000 [name:mrdump&]pstate: 22400005 (nzCv daif +PAN -UAO) [name:mrdump&]pc : [0xffffffdbaf52bb2c] ufshcd_clear_cmd+0x280/0x288 [name:mrdump&]lr : [0xffffffdbaf52a774] ufshcd_wait_for_dev_cmd+0x3e4/0x82c [name:mrdump&]sp : ffffffc0081471b0 <snip> Workqueue: ufs_eh_wq_0 ufshcd_err_handler Call trace: dump_backtrace+0xf8/0x144 show_stack+0x18/0x24 dump_stack_lvl+0x78/0x9c dump_stack+0x18/0x44 mrdump_common_die+0x254/0x480 [mrdump] ipanic_die+0x20/0x30 [mrdump] notify_die+0x15c/0x204 die+0x10c/0x5f8 arm64_notify_die+0x74/0x13c do_debug_exception+0x164/0x26c el1_dbg+0x64/0x80 el1h_64_sync_handler+0x3c/0x90 el1h_64_sync+0x68/0x6c ufshcd_clear_cmd+0x280/0x288 ufshcd_wait_for_dev_cmd+0x3e4/0x82c ufshcd_exec_dev_cmd+0x5bc/0x9ac ufshcd_verify_dev_init+0x84/0x1c8 ufshcd_probe_hba+0x724/0x1ce0 ufshcd_host_reset_and_restore+0x260/0x574 ufshcd_reset_and_restore+0x138/0xbd0 ufshcd_err_handler+0x1218/0x2f28 process_one_work+0x5fc/0x1140 worker_thread+0x7d8/0xe20 kthread+0x25c/0x468 ret_from_fork+0x10/0x20
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 15, 2025 | Apr 17, 2024 |
| Suse | — | Upgrade dtb-exynosUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-rtUpgrade kernel-obs-qaUpgrade kernel-syms-rtUpgrade dlm-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade kernel-obs-buildUpgrade dlm-kmp-azureUpgrade kernel-azure-vdsoUpgrade kernel-docs-htmlUpgrade cluster-md-kmp-azureUpgrade dtb-lgUpgrade dtb-qcomUpgrade gfs2-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-livepatch-develUpgrade kernel-kvmsmallUpgrade kernel-macrosUpgrade ocfs2-kmp-rtUpgrade kernel-kvmsmall-develUpgrade kernel-source-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-rt-extraUpgrade kselftests-kmp-64kbUpgrade kernel-debug-vdsoUpgrade ocfs2-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-rt-optionalUpgrade dtb-broadcomUpgrade kernel-devel-azureUpgrade kernel-default-vdsoUpgrade dtb-apmUpgrade kernel-rt-vdsoUpgrade dtb-nvidiaUpgrade kernel-sourceUpgrade kernel-debug-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-develUpgrade dtb-amlogicUpgrade kernel-azureUpgrade kernel-default-extraUpgrade kernel-source-azureUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-defaultUpgrade dtb-rockchipUpgrade kernel-default-baseUpgrade kernel-defaultUpgrade kernel-source-vanillaUpgrade kernel-64kbUpgrade kernel-default-optionalUpgrade kernel-debug-develUpgrade kernel-64kb-extraUpgrade dtb-marvellUpgrade dtb-alteraUpgrade kernel-64kb-optionalUpgrade kernel-rt_debug-develUpgrade kernel-develUpgrade dtb-xilinxUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debugUpgrade kernel-azure-optionalUpgrade kernel-64kb-livepatch-develUpgrade dtb-allwinnerUpgrade kernel-azure-extraUpgrade dlm-kmp-rtUpgrade kernel-symsUpgrade ocfs2-kmp-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-devel-rtUpgrade kernel-default-livepatch-develUpgrade kernel-default-livepatchUpgrade kernel-debugUpgrade gfs2-kmp-defaultUpgrade dtb-socionextUpgrade dtb-appleUpgrade dtb-amdUpgrade dtb-amazonUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-develUpgrade dtb-renesasUpgrade dtb-mediatekUpgrade kernel-64kb-develUpgrade dtb-caviumUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-rtUpgrade dtb-sprdUpgrade cluster-md-kmp-64kbUpgrade kernel-rt-livepatchUpgrade gfs2-kmp-azureUpgrade kernel-default-develUpgrade dtb-hisiliconUpgrade gfs2-kmp-64kbUpgrade kernel-docsUpgrade dtb-freescaleUpgrade dtb-arm | Jul 10, 2024 | Apr 17, 2024 |
| Ubuntu | — | Upgrade linux-raspi-realtime | Feb 11, 2025 | Apr 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub