In the Linux kernel, the following vulnerability has been resolved:
blk-iocost: avoid out of bounds shift
UBSAN catches undefined behavior in blk-iocost, where sometimes iocg->delay is shifted right by a number that is too large, resulting in undefined behavior on some architectures.
[ 186.556576] ------------[ cut here ]------------ UBSAN: shift-out-of-bounds in block/blk-iocost.c:1366:23 shift exponent 64 is too large for 64-bit type 'u64' (aka 'unsigned long long') CPU: 16 PID: 0 Comm: swapper/16 Tainted: G S E N 6.9.0-0_fbk700_debug_rc2_kbuilder_0_gc85af715cac0 #1 Hardware name: Quanta Twin Lakes MP/Twin Lakes Passive MP, BIOS F09_3A23 12/08/2020 Call Trace: <IRQ> dump_stack_lvl+0x8f/0xe0 __ubsan_handle_shift_out_of_bounds+0x22c/0x280 iocg_kick_delay+0x30b/0x310 ioc_timer_fn+0x2fb/0x1f80 __run_timer_base+0x1b6/0x250 ...
Avoid that undefined behavior by simply taking the "delay = 0" branch if the shift is too large.
I am not sure what the symptoms of an undefined value delay will be, but I suspect it could be more than a little annoying to debug.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernelUpgrade kernel-tools-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-5.15.160-104.158Upgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-develUpgrade kernel-livepatch-5.10.217-205.860Upgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade python-perfUpgrade perfUpgrade bpftool | Jun 12, 2024 | May 30, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-headersUpgrade perf-debuginfoUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpfUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-develUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-modules-extra-commonUpgrade kernelUpgrade kernel-livepatch-6.1.91-99.172Upgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-libbpf-develUpgrade kernel-tools-develUpgrade kernel-libbpf-static | Feb 17, 2025 | May 30, 2024 |
| Debian | — | Upgrade linux | Jun 4, 2024 | May 30, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade kernelUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Oct 8, 2024 | May 30, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernelUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelists | Oct 9, 2024 | May 30, 2024 |
| Suse | — | Upgrade kernel-rt-livepatch-develUpgrade kernel-docsUpgrade dtb-mediatekUpgrade kernel-devel-azureUpgrade dlm-kmp-azureUpgrade kernel-docs-htmlUpgrade kernel-syms-azureUpgrade cluster-md-kmp-azureUpgrade dtb-socionextUpgrade kernel-macrosUpgrade kernel-symsUpgrade gfs2-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt_debugUpgrade kernel-azure-extraUpgrade dtb-amazonUpgrade dtb-apmUpgrade gfs2-kmp-rtUpgrade dtb-amlogicUpgrade kernel-64kbUpgrade kernel-rt_debug-vdsoUpgrade ocfs2-kmp-rtUpgrade dlm-kmp-defaultUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-extraUpgrade kernel-kvmsmallUpgrade kernel-64kb-optionalUpgrade kernel-azure-livepatch-develUpgrade kernel-source-azureUpgrade kernel-syms-rtUpgrade kernel-kvmsmall-develUpgrade kernel-azure-vdsoUpgrade kernel-obs-qaUpgrade kernel-zfcpdumpUpgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-default-develUpgrade kernel-debug-livepatch-develUpgrade dtb-qcomUpgrade kernel-rt-vdsoUpgrade kernel-sourceUpgrade reiserfs-kmp-rtUpgrade kernel-default-base-rebuildUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-armUpgrade kernel-rtUpgrade dtb-exynosUpgrade dtb-marvellUpgrade kernel-azure-develUpgrade kselftests-kmp-azureUpgrade kernel-develUpgrade dtb-freescaleUpgrade dtb-appleUpgrade dtb-broadcomUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade dtb-alteraUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-defaultUpgrade kselftests-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade kernel-rt-extraUpgrade kernel-source-rtUpgrade reiserfs-kmp-azureUpgrade dtb-caviumUpgrade dtb-renesasUpgrade kernel-default-livepatchUpgrade kselftests-kmp-rtUpgrade dtb-amdUpgrade kernel-rt_debug-develUpgrade kernel-obs-buildUpgrade kernel-debugUpgrade kernel-azure-optionalUpgrade kernel-rt-optionalUpgrade kernel-rt-livepatchUpgrade kernel-64kb-extraUpgrade gfs2-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade dtb-hisiliconUpgrade ocfs2-kmp-defaultUpgrade kernel-debug-vdsoUpgrade kernel-azureUpgrade gfs2-kmp-azureUpgrade dtb-lgUpgrade dtb-allwinnerUpgrade cluster-md-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-rt-develUpgrade kernel-default-vdsoUpgrade kernel-default-optionalUpgrade kernel-debug-develUpgrade kernel-64kb-develUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-devel-rtUpgrade kernel-default-livepatch-develUpgrade kernel-default-baseUpgrade dtb-xilinxUpgrade dtb-sprdUpgrade dtb-rockchipUpgrade dtb-nvidia | Jul 10, 2024 | May 30, 2024 |
| Ubuntu | — | Upgrade linux-image-azure-cvmUpgrade linux-image-5.15.0-1062-nvidiaUpgrade linux-image-oem-20.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-5.15.0-1035-xilinx-zynqmpUpgrade linux-image-5.15.0-118-genericUpgrade linux-image-5.15.0-1050-gkeopUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-5.15.0-118-generic-64kUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-5.15.0-1067-awsUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-oem-24.04Upgrade linux-image-5.15.0-1070-azure-fdeUpgrade linux-image-5.15.0-118-generic-lpaeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-virtualUpgrade linux-image-oracleUpgrade linux-image-awsUpgrade linux-image-5.15.0-1064-kvmUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gkeUpgrade linux-image-5.15.0-118-lowlatency-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.15.0-1066-gcpUpgrade linux-image-5.15.0-1060-raspiUpgrade linux-image-5.15.0-118-lowlatencyUpgrade linux-image-5.15.0-1062-intel-iotgUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-gke-5.15Upgrade linux-image-oem-20.04bUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-ibm-classicUpgrade linux-image-azure-fdeUpgrade linux-image-nvidiaUpgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1065-oracleUpgrade linux-image-raspiUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-64kUpgrade linux-image-azureUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-5.15.0-1070-azureUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-intelUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-azure-lts-22.04Upgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.8.0-1012-azureUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-oem-20.04cUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-5.15.0-1060-ibmUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-ibmUpgrade linux-image-oem-20.04dUpgrade linux-image-gkeopUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-intel-iotgUpgrade linux-image-nvidia-6.8Upgrade linux-image-5.15.0-1064-gkeUpgrade linux-image-genericUpgrade linux-image-5.15.0-1062-nvidia-lowlatency | Aug 9, 2024 | May 30, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | May 30, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub