Updated: 2026-02-27 03:41:31.526226
Description:
In the Linux kernel, the following vulnerability has been resolved: iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic() When performing an iSCSI boot using IPv6, iscsistart still reads the /sys/firmware/ibft/ethernetX/subnet-mask entry. Since the IPv6 prefix length is 64, this causes the shift exponent to become negative, triggering a UBSAN warning. As the concept of a subnet mask does not apply to IPv6, the value is set to ~0 to suppress the warning message.
| Links | NIST | CIRCL | RHEL | Ubuntu |
| Severity | Score | |
|---|---|---|
| CVSS Version 2.x | 0.0 | |
| CVSS Version 3.x | HIGH | 7.1 |
| OS name | Project name | Version | Score | Severity | Status | Errata | Last updated | Statement |
|---|---|---|---|---|---|---|---|---|
| Oracle Linux 7 ELS | kernel-uek | 5.4.17 | 7.1 | HIGH | Released | CLSA-2025:1757963029 | 2025-09-16 11:21:08 | |
| RHEL 7 ELS | kernel | 3.10.0 | 7.1 | HIGH | Released | CLSA-2025:1750353839 | 2025-06-20 00:29:50 | |
| TuxCare 9.6 ESU | kernel | 5.14.0 | 7.1 | HIGH | Already Fixed | 2025-08-18 00:47:34 | ||
| Ubuntu 16.04 ELS | linux-hwe | 4.15.0 | 7.1 | HIGH | Released | CLSA-2025:1749571039 | 2025-06-11 00:59:44 | |
| Ubuntu 16.04 ELS | linux | 4.4.0 | 7.1 | HIGH | Released | CLSA-2025:1754037187 | 2025-08-02 00:21:56 | |
| Ubuntu 18.04 ELS | linux | 4.15.0 | 7.1 | HIGH | Released | CLSA-2025:1749548422 | 2025-06-11 00:59:42 | |
| Ubuntu 20.04 ELS | linux | 5.4.0 | 7.1 | HIGH | Released | 2025-06-24 00:41:59 |