CVE-2025-21993

iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()

High · published April 2, 2025

CVSS v3.1
7.1
EPSS
0%
Percentile
11.2
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()

When performing an iSCSI boot using IPv6, iscsistart still reads the

/sys/firmware/ibft/ethernetX/subnet-mask entry. Since the IPv6 prefix

length is 64, this causes the shift exponent to become negative,

triggering a UBSAN warning. As the concept of a subnet mask does not

apply to IPv6, the value is set to ~0 to suppress the warning message.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00214 · 11.2th percentile
Published
2025-04-02T12:53Z
EPSS history
Timeline
  • 02 APR 12:53Z
    iscsi_ibft: Fix UBSAN shift-out-of-bounds warning in ibft_attr_show_nic()
    cvelistv5