Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2025-21724

iommufd/iova_bitmap: Fix shift-out-of-bounds in iova_bitmap_offset_to_index()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: iommufd/iova_bitmap: Fix shift-out-of-bounds in iova_bitmap_offset_to_index() Resolve a UBSAN shift-out-of-bounds issue in iova_bitmap_offset_to_index() where shifting the constant "1" (of type int) by bitmap->mapped.pgshift (an unsigned long value) could result in undefined behavior. The constant "1" defaults to a 32-bit "int", and when "pgshift" exceeds 31 (e.g., pgshift = 63) the shift operation overflows, as the result cannot be represented in a 32-bit type. To resolve this, the constant is updated to "1UL", promoting it to an unsigned long type to match the operand's type.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 58ccf0190d19d9a8a41f8a02b9e06742b58df4a1 to < 44d9c94b7a3f29a3e07c4753603a35e9b28842a3affected
  • 58ccf0190d19d9a8a41f8a02b9e06742b58df4a1 to < 38ac76fc06bc6826a3e4b12a98efbe98432380a9affected
  • 58ccf0190d19d9a8a41f8a02b9e06742b58df4a1 to < d5d33f01b86af44b23eea61ee309e4ef22c0cdfeaffected
  • 58ccf0190d19d9a8a41f8a02b9e06742b58df4a1 to < b1f8453b8ff1ab79a03820ef608256c499769cb6affected
  • 58ccf0190d19d9a8a41f8a02b9e06742b58df4a1 to < e24c1551059268b37f6f40639883eafb281b8b9caffected

Linux Linux

Default version status: affected

  • 6.1affected
  • 0 to < 6.1unaffected
  • 6.1.129 to ≤ 6.1.*unaffected
  • 6.6.76 to ≤ 6.6.*unaffected
  • 6.12.13 to ≤ 6.12.*unaffected
  • 6.13.2 to ≤ 6.13.*unaffected
  • 6.14 to ≤ *unaffected

References