In the Linux kernel, the following vulnerability has been resolved: blk-iocost: avoid out of bounds shift UBSAN catches undefined behavior in blk-iocost, where sometimes iocg->delay is shifted righ…
高危 CVSS 7.1
摘要
In the Linux kernel, the following vulnerability has been resolved: blk-iocost: avoid out of bounds shift UBSAN catches undefined behavior in blk-iocost, where sometimes iocg->delay is shifted right by a number that is too large, resulting in undefined behavior on some architectures. [ 186.556576] ------------[ cut here ]------------ UBSAN: shift-out-of-bounds in block/blk-iocost.c:1366:23 shift exponent 64 is too large for 64-bit type 'u64' (aka 'unsigned long long') CPU: 16 PID: 0 Comm: s…
中文摘要建设中,暂以英文摘要呈现(DR-003 v2)。
深度研判
该漏洞尚未生成深度研判报告(DR-003 v2 AI pipeline 建设中)。
受影响产品
- :
- :
数据来源
- NVD DATABASE
原始链接
- https://git.kernel.org/stable/c/488dc6808cb8369685f18cee81e88e7052ac153b Patch
- https://git.kernel.org/stable/c/62accf6c1d7b433752cb3591bba8967b7a801ad5 Patch
- https://git.kernel.org/stable/c/844fc023e9f14a4fb1de5ae1eaefafd6d69c5fa1 Patch
- https://git.kernel.org/stable/c/beaa51b36012fad5a4d3c18b88a617aea7a9b96d Patch
- https://git.kernel.org/stable/c/ce0e99cae00e3131872936713b7f55eefd53ab86 Patch
- https://git.kernel.org/stable/c/f6add0a6f78dc6360b822ca4b6f9f2f14174c8ca Patch
- https://git.kernel.org/stable/c/488dc6808cb8369685f18cee81e88e7052ac153b Patch
- https://git.kernel.org/stable/c/62accf6c1d7b433752cb3591bba8967b7a801ad5 Patch
- https://git.kernel.org/stable/c/844fc023e9f14a4fb1de5ae1eaefafd6d69c5fa1 Patch
- https://git.kernel.org/stable/c/beaa51b36012fad5a4d3c18b88a617aea7a9b96d Patch
- https://git.kernel.org/stable/c/ce0e99cae00e3131872936713b7f55eefd53ab86 Patch
- https://git.kernel.org/stable/c/f6add0a6f78dc6360b822ca4b6f9f2f14174c8ca Patch
- https://lists.debian.org/debian-lts-announce/2024/06/msg00019.html Third Party Advisory
- https://security.netapp.com/advisory/ntap-20240905-0006/ Third Party Advisory
- https://cert-portal.siemens.com/productcert/html/ssa-265688.html
- https://cert-portal.siemens.com/productcert/html/ssa-613116.html
时间线
- nvd_ingest NVD