CVE-2025-21993

Updated: 2026-02-27 03:41:31.526226

Description:

In the Linux kernel, the following vulnerability has been resolved: iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic() When performing an iSCSI boot using IPv6, iscsistart still reads the /sys/firmware/ibft/ethernetX/subnet-mask entry. Since the IPv6 prefix length is 64, this causes the shift exponent to become negative, triggering a UBSAN warning. As the concept of a subnet mask does not apply to IPv6, the value is set to ~0 to suppress the warning message.


Links NIST CIRCL RHEL Ubuntu

Severity

Severity Score
CVSS Version 2.x 0.0
CVSS Version 3.x HIGH 7.1

Status

OS name Project name Version Score Severity Status Errata Last updated

Statement

Oracle Linux 7 ELS kernel-uek 5.4.17 7.1 HIGH Released CLSA-2025:1757963029 2025-09-16 11:21:08
RHEL 7 ELS kernel 3.10.0 7.1 HIGH Released CLSA-2025:1750353839 2025-06-20 00:29:50
TuxCare 9.6 ESU kernel 5.14.0 7.1 HIGH Already Fixed 2025-08-18 00:47:34
Ubuntu 16.04 ELS linux-hwe 4.15.0 7.1 HIGH Released CLSA-2025:1749571039 2025-06-11 00:59:44
Ubuntu 16.04 ELS linux 4.4.0 7.1 HIGH Released CLSA-2025:1754037187 2025-08-02 00:21:56
Ubuntu 18.04 ELS linux 4.15.0 7.1 HIGH Released CLSA-2025:1749548422 2025-06-11 00:59:42
Ubuntu 20.04 ELS linux 5.4.0 7.1 HIGH Released 2025-06-24 00:41:59
Total: 17