In the Linux kernel, the following vulnerability has been resolved:
scsi: ufs: exynos: Fix programming of HCI_UTRL_NEXUS_TYPE
On Google gs101, the number of UTP transfer request slots (nutrs) is 32, and in this case the driver ends up programming the UTRL_NEXUS_TYPE incorrectly as 0.
This is because the left hand side of the shift is 1, which is of type int, i.e. 31 bits wide. Shifting by more than that width results in undefined behaviour.
Fix this by switching to the BIT() macro, which applies correct type casting as required. This ensures the correct value is written to UTRL_NEXUS_TYPE (0xffffffff on gs101), and it also fixes a UBSAN shift warning:
UBSAN: shift-out-of-bounds in drivers/ufs/host/ufs-exynos.c:1113:21 shift exponent 32 is too large for 32-bit type 'int'
For consistency, apply the same change to the nutmrs / UTMRL_NEXUS_TYPE write.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade kernel-toolsUpgrade kernelUpgrade bpftoolUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.10.242-239.961Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-develUpgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade perfUpgrade bpftool-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-headers | May 20, 2026 | May 20, 2026 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Sep 25, 2025 | Sep 25, 2025 |
| Suse | — | Upgrade kernel-64kbUpgrade kernel-kvmsmallUpgrade dtb-apmUpgrade dtb-hisiliconUpgrade dtb-mediatekUpgrade gfs2-kmp-rtUpgrade kselftests-kmp-rtUpgrade dtb-amazonUpgrade kernel-rtUpgrade kselftests-kmp-defaultUpgrade dtb-qcomUpgrade kernel-kvmsmall-develUpgrade kernel-macrosUpgrade kernel-docsUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-develUpgrade kernel-sourceUpgrade kernel-obs-qaUpgrade dtb-amdUpgrade cluster-md-kmp-defaultUpgrade dtb-xilinxUpgrade kernel-zfcpdumpUpgrade kernel-default-develUpgrade kernel-64kb-develUpgrade kernel-default-extraUpgrade gfs2-kmp-64kbUpgrade kernel-64kb-optionalUpgrade kernel-symsUpgrade dtb-socionextUpgrade ocfs2-kmp-rtUpgrade dlm-kmp-defaultUpgrade dtb-amlogicUpgrade dtb-armUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-vdsoUpgrade dtb-renesasUpgrade dtb-caviumUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-livepatchUpgrade dtb-freescaleUpgrade dtb-sprdUpgrade kernel-docs-htmlUpgrade kernel-default-vdsoUpgrade kernel-defaultUpgrade dtb-exynosUpgrade dtb-broadcomUpgrade cluster-md-kmp-rtUpgrade kernel-rt-extraUpgrade kernel-64kb-extraUpgrade dtb-rockchipUpgrade dlm-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-develUpgrade kernel-source-vanillaUpgrade dtb-appleUpgrade kernel-default-livepatch-develUpgrade dtb-alteraUpgrade dtb-lgUpgrade dtb-marvellUpgrade kernel-obs-buildUpgrade gfs2-kmp-defaultUpgrade kernel-rt-optionalUpgrade kernel-default-optionalUpgrade kernel-default-livepatchUpgrade dtb-allwinnerUpgrade dlm-kmp-rtUpgrade dtb-nvidiaUpgrade kernel-kvmsmall-vdso | Dec 5, 2025 | Nov 6, 2025 |
| Ubuntu | — | Upgrade linux-image-aws-64k-5.15Upgrade linux-image-azureUpgrade linux-image-5.15.0-1049-nvidia-tegra-rtUpgrade linux-image-5.15.0-1097-gcp-fipsUpgrade linux-image-azure-fips-5.15Upgrade linux-image-fipsUpgrade linux-image-lowlatency-6.8Upgrade linux-image-gke-64k-6.8Upgrade linux-image-gcp-64kUpgrade linux-image-azure-5.15Upgrade linux-image-6.8.0-1046-awsUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oracle-5.15Upgrade linux-image-oracle-6.8Upgrade linux-image-5.15.0-163-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gcp-6.8Upgrade linux-image-azure-cvmUpgrade linux-image-oem-22.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-1051-azureUpgrade linux-image-generic-lpae-5.15Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-163-fipsUpgrade linux-image-generic-5.15Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-5.15.0-163-generic-64kUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1046-nvidia-lowlatencyUpgrade linux-image-genericUpgrade linux-image-gke-64kUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-6.8.0-1023-xilinxUpgrade linux-image-virtual-6.8Upgrade linux-image-nvidia-6.8Upgrade linux-image-5.15.0-1102-azureUpgrade linux-image-raspiUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1101-azure-fipsUpgrade linux-image-aws-fips-5.15Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-5.15.0-1097-aws-64kUpgrade linux-image-gcp-fipsUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.8.1-1041-realtimeUpgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1096-realtimeUpgrade linux-image-raspi-6.8Upgrade linux-image-intel-iotg-5.15Upgrade linux-image-lowlatency-64kUpgrade linux-image-realtime-6.8.1Upgrade linux-image-lowlatency-5.15Upgrade linux-image-6.8.0-1043-gke-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-ibm-5.15Upgrade linux-image-generic-64k-5.15Upgrade linux-image-5.15.0-163-lowlatency-64kUpgrade linux-image-generic-64k-6.8Upgrade linux-image-5.15.0-1091-ibmUpgrade linux-image-xilinx-6.8Upgrade linux-image-awsUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-6.8.0-1046-azureUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-gcp-5.15Upgrade linux-image-aws-6.8Upgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-raspi-nolpaeUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1046-aws-64kUpgrade linux-image-6.8.0-1047-gcp-64kUpgrade linux-image-aws-fipsUpgrade linux-image-5.15.0-1038-nvidia-tegra-igx-rtUpgrade linux-image-5.15.0-163-generic-lpaeUpgrade linux-image-6.8.0-1044-ibmUpgrade linux-image-6.8.0-1047-gcpUpgrade linux-image-5.15.0-1049-nvidia-tegraUpgrade linux-image-6.8.0-100-generic-64kUpgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-6.8.0-100-lowlatencyUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1038-nvidia-tegra-igxUpgrade linux-image-oem-20.04cUpgrade linux-image-ibm-classicUpgrade linux-image-aws-fips-6.8Upgrade linux-image-azure-6.8Upgrade linux-image-5.15.0-1092-intel-iotgUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-ibm-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-5.15.0-163-genericUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-6.8.0-1046-nvidia-64kUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-oracle-64kUpgrade linux-image-nvidia-5.15Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-5.15.0-1089-intel-iot-realtimeUpgrade linux-image-lowlatencyUpgrade linux-image-aws-5.15Upgrade linux-image-6.8.0-1043-oracleUpgrade linux-image-xilinxUpgrade linux-image-virtual-5.15Upgrade linux-image-oem-20.04Upgrade linux-image-gkeop-6.8Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-nvidia-tegraUpgrade linux-image-ibmUpgrade linux-image-gkeopUpgrade linux-image-gke-6.8Upgrade linux-image-gke-5.15Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-azure-lts-22.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1046-azure-fipsUpgrade linux-image-raspi-realtimeUpgrade linux-image-5.15.0-1093-gkeUpgrade linux-image-6.8.0-1030-gkeopUpgrade linux-image-6.8.0-100-lowlatency-64kUpgrade linux-image-fips-6.8Upgrade linux-image-6.8.0-1043-gkeUpgrade linux-image-intel-iotgUpgrade linux-image-generic-6.8Upgrade linux-image-5.15.0-1091-raspiUpgrade linux-image-realtime-5.15Upgrade linux-image-oracleUpgrade linux-image-oem-20.04dUpgrade linux-image-aws-lts-24.04Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-6.8.0-1047-raspiUpgrade linux-image-5.15.0-1101-azureUpgrade linux-image-5.15.0-1097-gcpUpgrade linux-image-5.15.0-1080-gkeopUpgrade linux-image-azure-fips-6.8Upgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1046-nvidiaUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-2037-raspi-realtimeUpgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-1046-nvidia-lowlatency-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-intelUpgrade linux-image-oem-22.04cUpgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-kvm-5.15Upgrade linux-image-raspi-5.15Upgrade linux-image-6.8.0-100-fipsUpgrade linux-image-fips-5.15Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-realtimeUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1047-gcp-fipsUpgrade linux-image-6.8.0-1046-aws-fipsUpgrade linux-image-6.8.0-1043-oracle-64kUpgrade linux-image-5.15.0-1061-xilinx-zynqmpUpgrade linux-image-5.15.0-1089-kvmUpgrade linux-image-gcpUpgrade linux-image-kvmUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1094-oracleUpgrade linux-image-5.15.0-1092-nvidiaUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-azure-fipsUpgrade linux-image-5.15.0-1097-aws-fipsUpgrade linux-image-5.15.0-1092-nvidia-lowlatencyUpgrade linux-image-azure-lts-24.04Upgrade linux-image-5.15.0-1097-awsUpgrade linux-image-aws-64kUpgrade linux-image-6.8.0-100-generic | Dec 5, 2025 | Sep 11, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Sep 19, 2025 | Sep 11, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub