In the Linux kernel, the following vulnerability has been resolved:
net/mlx5: HWS, fix definer's HWS_SET32 macro for negative offset
When bit offset for HWS_SET32 macro is negative, UBSAN complains about the shift-out-of-bounds:
UBSAN: shift-out-of-bounds in drivers/net/ethernet/mellanox/mlx5/core/steering/hws/definer.c:177:2 shift exponent -8 is negative
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Suse | — | Upgrade reiserfs-kmp-defaultUpgrade kernel-kvmsmallUpgrade kernel-sourceUpgrade kernel-64kb-develUpgrade kernel-kvmsmall-develUpgrade kernel-develUpgrade kernel-macrosUpgrade kernel-source-azureUpgrade kernel-zfcpdumpUpgrade kernel-devel-azureUpgrade kernel-obs-qaUpgrade kernel-symsUpgrade kernel-64kbUpgrade kernel-default-extraUpgrade kernel-default-vdsoUpgrade kernel-default-livepatchUpgrade kernel-syms-azureUpgrade kernel-default-develUpgrade kernel-azure-extraUpgrade kernel-obs-buildUpgrade kernel-64kb-extraUpgrade kernel-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-source-vanillaUpgrade kernel-docs-htmlUpgrade kernel-default-baseUpgrade kernel-azure-develUpgrade kernel-docsUpgrade kernel-azure-vdsoUpgrade kernel-default | Dec 5, 2025 | Jun 13, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub