In the Linux kernel, the following vulnerability has been resolved:
iommufd/iova_bitmap: Fix shift-out-of-bounds in iova_bitmap_offset_to_index()
Resolve a UBSAN shift-out-of-bounds issue in iova_bitmap_offset_to_index() where shifting the constant "1" (of type int) by bitmap->mapped.pgshift (an unsigned long value) could result in undefined behavior.
The constant "1" defaults to a 32-bit "int", and when "pgshift" exceeds 31 (e.g., pgshift = 63) the shift operation overflows, as the result cannot be represented in a 32-bit type.
To resolve this, the constant is updated to "1UL", promoting it to an unsigned long type to match the operand's type.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-livepatch-6.1.129-138.220Upgrade kernel-modules-extra-commonUpgrade kernel-libbpf-staticUpgrade kernel-libbpf-develUpgrade kernel-tools-develUpgrade python3-perf-debuginfoUpgrade bpftoolUpgrade kernelUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perfUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-modules-extraUpgrade kernel-headersUpgrade perfUpgrade kernel-libbpfUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade perf-debuginfoUpgrade kernel-debuginfo | Jun 11, 2025 | Feb 27, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Mar 17, 2025 | Feb 27, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | May 13, 2026 | Feb 27, 2025 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Jul 9, 2025 | Feb 27, 2025 |
| Suse | — | Upgrade dtb-appleUpgrade kernel-default-livepatchUpgrade dlm-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-extraUpgrade kernel-rt-livepatch-develUpgrade kernel-rt_debug-vdsoUpgrade reiserfs-kmp-rtUpgrade kernel-zfcpdumpUpgrade kernel-syms-rtUpgrade kernel-kvmsmall-vdsoUpgrade kselftests-kmp-defaultUpgrade dtb-freescaleUpgrade dtb-amazonUpgrade kernel-rtUpgrade kernel-azure-extraUpgrade kernel-kvmsmallUpgrade gfs2-kmp-rtUpgrade kernel-64kbUpgrade kernel-rt-vdsoUpgrade kernel-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-debug-vdsoUpgrade dtb-apmUpgrade dtb-nvidiaUpgrade kernel-devel-azureUpgrade kernel-docs-htmlUpgrade kernel-macrosUpgrade kselftests-kmp-azureUpgrade kernel-default-develUpgrade kernel-kvmsmall-develUpgrade kernel-obs-qaUpgrade ocfs2-kmp-rtUpgrade dtb-socionextUpgrade kernel-rt_debug-develUpgrade kernel-obs-buildUpgrade kernel-azure-develUpgrade dtb-marvellUpgrade kernel-source-rtUpgrade kernel-syms-azureUpgrade dtb-amlogicUpgrade dtb-broadcomUpgrade dlm-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-rt_debugUpgrade kernel-source-vanillaUpgrade cluster-md-kmp-azureUpgrade kernel-docsUpgrade cluster-md-kmp-defaultUpgrade kernel-azureUpgrade kselftests-kmp-rtUpgrade kernel-rt-optionalUpgrade kernel-azure-vdsoUpgrade kernel-64kb-optionalUpgrade kernel-64kb-extraUpgrade kernel-source-azureUpgrade dtb-renesasUpgrade kernel-sourceUpgrade dtb-amdUpgrade kernel-default-baseUpgrade gfs2-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade ocfs2-kmp-azureUpgrade dtb-caviumUpgrade kernel-64kb-develUpgrade dtb-exynosUpgrade reiserfs-kmp-defaultUpgrade kernel-develUpgrade kernel-debug-develUpgrade dtb-xilinxUpgrade dtb-rockchipUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-64kbUpgrade gfs2-kmp-azureUpgrade dtb-sprdUpgrade dtb-lgUpgrade dtb-mediatekUpgrade kernel-debugUpgrade kernel-devel-rtUpgrade kernel-default-vdsoUpgrade dtb-armUpgrade dtb-alteraUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-rtUpgrade kernel-symsUpgrade kernel-default-base-rebuildUpgrade dtb-allwinnerUpgrade dtb-hisiliconUpgrade ocfs2-kmp-defaultUpgrade dtb-qcomUpgrade kernel-default-optionalUpgrade kernel-default-livepatch-develUpgrade kernel-azure-optionalUpgrade kernel-rt-devel | Mar 13, 2025 | Feb 27, 2025 |
| Ubuntu | — | Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-oem-6.8Upgrade linux-image-oem-24.04bUpgrade linux-image-azure-nvidia-6.8Upgrade linux-image-6.8.0-1033-gcp-64kUpgrade linux-image-gkeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-genericUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oracle-64k-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.1-1025-realtimeUpgrade linux-image-6.8.0-1031-nvidia-lowlatencyUpgrade linux-image-6.8.0-64-genericUpgrade linux-image-oem-22.04Upgrade linux-image-6.11.0-1015-azureUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.11.0-26-genericUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-gkeopUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1029-oracleUpgrade linux-image-lowlatency-64kUpgrade linux-image-oracleUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatency-6.8Upgrade linux-image-virtual-6.8Upgrade linux-image-6.8.0-1031-raspiUpgrade linux-image-6.8.0-1031-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1031-oemUpgrade linux-image-azure-fde-6.8Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-ibmUpgrade linux-image-6.8.0-1032-aws-64kUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-gcp-6.8Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.11.0-1015-azure-fdeUpgrade linux-image-6.11.0-26-generic-64kUpgrade linux-image-6.8.0-1015-gkeopUpgrade linux-image-6.8.0-1022-azure-nvidiaUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-nvidiaUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-gcpUpgrade linux-image-aws-64kUpgrade linux-image-oracle-64kUpgrade linux-image-generic-64k-6.8Upgrade linux-image-6.11.0-1013-raspiUpgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-1029-oracle-64kUpgrade linux-image-6.11.0-1015-gcp-64kUpgrade linux-image-6.11.0-1014-lowlatencyUpgrade linux-image-oem-22.04cUpgrade linux-image-raspi-6.8Upgrade linux-image-6.11.0-1010-realtimeUpgrade linux-image-azure-nvidiaUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-azure-6.8Upgrade linux-image-6.8.0-1028-gkeUpgrade linux-image-6.11.0-1016-oracle-64kUpgrade linux-image-realtime-6.8.1Upgrade linux-image-kvmUpgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-64-lowlatency-64kUpgrade linux-image-6.8.0-2026-raspi-realtimeUpgrade linux-image-6.8.0-1034-azure-fdeUpgrade linux-image-oem-24.04aUpgrade linux-image-gke-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.11.0-1015-gcpUpgrade linux-image-6.8.0-1032-awsUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-64-generic-64kUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-oem-22.04dUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-6.8Upgrade linux-image-6.8.0-64-lowlatencyUpgrade linux-image-aws-lts-24.04Upgrade linux-image-6.8.0-1033-gcpUpgrade linux-image-6.8.0-1031-nvidiaUpgrade linux-image-6.11.0-1016-oracleUpgrade linux-image-6.8.0-1029-ibmUpgrade linux-image-oracle-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-raspiUpgrade linux-image-azureUpgrade linux-image-oem-22.04bUpgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-6.11.0-1022-oemUpgrade linux-image-ibm-classicUpgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1034-azureUpgrade linux-image-6.8.0-1031-nvidia-64kUpgrade linux-image-azure-fdeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-virtualUpgrade linux-image-raspi-realtimeUpgrade linux-image-ibm-6.8Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.11.0-1014-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-awsUpgrade linux-image-realtimeUpgrade linux-image-6.11.0-1014-aws | May 21, 2025 | Feb 27, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Feb 27, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub