In the Linux kernel, the following vulnerability has been resolved:
iommufd/iova_bitmap: Fix shift-out-of-bounds in iova_bitmap_offset_to_index()
Resolve a UBSAN shift-out-of-bounds issue in iova_bitmap_offset_to_index() where shifting the constant "1" (of type int) by bitmap->mapped.pgshift (an unsigned long value) could result in undefined behavior.
The constant "1" defaults to a 32-bit "int", and when "pgshift" exceeds 31 (e.g., pgshift = 63) the shift operation overflows, as the result cannot be represented in a 32-bit type.
To resolve this, the constant is updated to "1UL", promoting it to an unsigned long type to match the operand's type.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-develUpgrade kernel-livepatch-6.1.129-138.220Upgrade kernel-libbpf-staticUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade python3-perf-debuginfoUpgrade python3-perfUpgrade kernel-modules-extra-commonUpgrade kernelUpgrade kernel-headersUpgrade kernel-libbpfUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-modules-extraUpgrade kernel-tools-debuginfoUpgrade perf | Jun 11, 2025 | Feb 27, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Mar 17, 2025 | Feb 27, 2025 |
| Oracle_linux | — | Upgrade kernel-uek | May 13, 2026 | Feb 27, 2025 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Jul 9, 2025 | Feb 27, 2025 |
| Suse | — | Upgrade kernel-rt_debugUpgrade kernel-rt-vdsoUpgrade kernel-rt-optionalUpgrade kernel-source-vanillaUpgrade kernel-default-extraUpgrade kernel-docsUpgrade cluster-md-kmp-azureUpgrade dtb-appleUpgrade kernel-rt-extraUpgrade kernel-rtUpgrade kernel-azure-develUpgrade dlm-kmp-defaultUpgrade dtb-amlogicUpgrade kernel-64kbUpgrade kernel-kvmsmallUpgrade dtb-freescaleUpgrade kselftests-kmp-defaultUpgrade kernel-syms-azureUpgrade kernel-azure-extraUpgrade kernel-debug-vdsoUpgrade dlm-kmp-azureUpgrade kernel-devel-azureUpgrade kernel-macrosUpgrade kselftests-kmp-rtUpgrade kernel-obs-qaUpgrade kernel-syms-rtUpgrade kernel-zfcpdumpUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt_debug-vdsoUpgrade dtb-broadcomUpgrade dtb-marvellUpgrade kernel-defaultUpgrade gfs2-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debug-develUpgrade ocfs2-kmp-rtUpgrade kernel-docs-htmlUpgrade kernel-source-rtUpgrade dtb-socionextUpgrade kernel-azure-vdsoUpgrade kernel-default-livepatchUpgrade dtb-nvidiaUpgrade kernel-kvmsmall-develUpgrade dtb-amazonUpgrade kernel-obs-buildUpgrade kernel-azureUpgrade dtb-apmUpgrade kernel-default-develUpgrade kselftests-kmp-azureUpgrade kernel-rt-develUpgrade kernel-debugUpgrade kernel-64kb-develUpgrade reiserfs-kmp-defaultUpgrade kernel-default-baseUpgrade dtb-amdUpgrade reiserfs-kmp-azureUpgrade kernel-64kb-optionalUpgrade dtb-allwinnerUpgrade kernel-default-optionalUpgrade dtb-hisiliconUpgrade dtb-renesasUpgrade kernel-64kb-extraUpgrade ocfs2-kmp-defaultUpgrade kernel-develUpgrade kernel-debug-develUpgrade dtb-xilinxUpgrade dtb-rockchipUpgrade dtb-exynosUpgrade dtb-caviumUpgrade dtb-armUpgrade kernel-devel-rtUpgrade kernel-default-vdsoUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-rtUpgrade dtb-alteraUpgrade gfs2-kmp-64kbUpgrade dtb-sprdUpgrade kselftests-kmp-64kbUpgrade gfs2-kmp-azureUpgrade dtb-lgUpgrade kernel-source-azureUpgrade kernel-default-livepatch-develUpgrade kernel-azure-optionalUpgrade dlm-kmp-64kbUpgrade cluster-md-kmp-64kbUpgrade dtb-mediatekUpgrade kernel-symsUpgrade kernel-default-base-rebuildUpgrade dtb-qcomUpgrade ocfs2-kmp-azureUpgrade kernel-sourceUpgrade gfs2-kmp-default | Mar 13, 2025 | Feb 27, 2025 |
| Ubuntu | — | Upgrade linux-image-6.11.0-26-genericUpgrade linux-image-gkeop-6.8Upgrade linux-image-virtual-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1031-raspiUpgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-6.8Upgrade linux-image-6.8.0-1029-oracleUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-6.8.0-1031-nvidia-lowlatencyUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-24.04bUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-6.11.0-1015-azureUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-azure-nvidia-6.8Upgrade linux-image-oem-22.04aUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gkeopUpgrade linux-image-6.11.0-1015-azure-fdeUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1033-gcp-64kUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.0-1022-azure-nvidiaUpgrade linux-image-generic-64kUpgrade linux-image-lowlatency-6.8Upgrade linux-image-oracleUpgrade linux-image-6.8.0-1032-aws-64kUpgrade linux-image-azure-fde-6.8Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-nvidiaUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-6.11.0-26-generic-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-ibmUpgrade linux-image-gkeUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.8.0-1031-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1031-oemUpgrade linux-image-6.8.0-64-genericUpgrade linux-image-6.8.1-1025-realtimeUpgrade linux-image-gcp-6.8Upgrade linux-image-6.8.0-1015-gkeopUpgrade linux-image-6.8.0-1031-nvidiaUpgrade linux-image-6.8.0-1033-gcpUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.11.0-1015-gcp-64kUpgrade linux-image-raspi-realtimeUpgrade linux-image-aws-64k-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-kvmUpgrade linux-image-azure-6.8Upgrade linux-image-azure-nvidiaUpgrade linux-image-6.8.0-1028-gkeUpgrade linux-image-6.11.0-1016-oracle-64kUpgrade linux-image-6.11.0-1014-awsUpgrade linux-image-6.8.0-1034-azure-fdeUpgrade linux-image-ibm-classicUpgrade linux-image-azure-fdeUpgrade linux-image-6.11.0-1010-realtimeUpgrade linux-image-raspi-6.8Upgrade linux-image-6.8.0-1032-awsUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.11.0-1015-gcpUpgrade linux-image-6.11.0-1022-oemUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1034-azureUpgrade linux-image-6.8.0-1029-ibmUpgrade linux-image-6.8.0-1031-nvidia-64kUpgrade linux-image-6.8.0-64-lowlatencyUpgrade linux-image-azureUpgrade linux-image-6.8.0-64-generic-64kUpgrade linux-image-aws-lts-24.04Upgrade linux-image-generic-6.8Upgrade linux-image-6.11.0-1016-oracleUpgrade linux-image-oracle-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-raspiUpgrade linux-image-oem-22.04dUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-64k-6.8Upgrade linux-image-oem-22.04cUpgrade linux-image-6.11.0-1014-lowlatency-64kUpgrade linux-image-oracle-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-realtimeUpgrade linux-image-6.11.0-1014-lowlatencyUpgrade linux-image-realtime-6.8.1Upgrade linux-image-azure-nvidia-lts-24.04Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-ibm-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-aws-64kUpgrade linux-image-6.8.0-2026-raspi-realtimeUpgrade linux-image-gcpUpgrade linux-image-awsUpgrade linux-image-aws-6.8Upgrade linux-image-6.11.0-1013-raspiUpgrade linux-image-oem-24.04aUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gke-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-virtualUpgrade linux-image-azure-lts-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.8.0-1029-oracle-64kUpgrade linux-image-6.8.0-64-lowlatency-64k | May 21, 2025 | Feb 27, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Feb 27, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub