CVE-2022-49870

EUVD-2025-12911
In the Linux kernel, the following vulnerability has been resolved:

capabilities: fix undefined behavior in bit shift for CAP_TO_MASK

Shifting signed 32-bit value by 31 bits is undefined, so changing
significant bit to unsigned. The UBSAN warning calltrace like below:

UBSAN: shift-out-of-bounds in security/commoncap.c:1252:2
left shift of 1 by 31 places cannot be represented in type 'int'
Call Trace:
 <TASK>
 dump_stack_lvl+0x7d/0xa5
 dump_stack+0x15/0x1b
 ubsan_epilogue+0xe/0x4e
 __ubsan_handle_shift_out_of_bounds+0x1e7/0x20c
 cap_task_prctl+0x561/0x6f0
 security_task_prctl+0x5a/0xb0
 __x64_sys_prctl+0x61/0x8f0
 do_syscall_64+0x58/0x80
 entry_SYSCALL_64_after_hwframe+0x63/0xcd
 </TASK>
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.1 HIGH
LOCAL
LOW
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 8%
Affected Products (NVD)
VendorProductVersion
linuxlinux_kernel
2.6.25 ≤
𝑥
< 4.9.334
linuxlinux_kernel
4.10 ≤
𝑥
< 4.14.300
linuxlinux_kernel
4.15 ≤
𝑥
< 4.19.267
linuxlinux_kernel
4.20 ≤
𝑥
< 5.4.225
linuxlinux_kernel
5.5 ≤
𝑥
< 5.10.155
linuxlinux_kernel
5.11 ≤
𝑥
< 5.15.79
linuxlinux_kernel
5.16 ≤
𝑥
< 6.0.9
linuxlinux_kernel
6.1:rc1
linuxlinux_kernel
6.1:rc2
linuxlinux_kernel
6.1:rc3
linuxlinux_kernel
6.1:rc4
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
linux
bookworm
6.1.129-1
fixed
bookworm (security)
6.1.135-1
fixed
bullseye
5.10.223-1
fixed
bullseye (security)
5.10.234-1
fixed
sid
6.12.25-1
fixed
trixie
6.12.22-1
fixed
openSUSE logo
openSUSE / SLES Releases
openSUSE Product
Release
cluster-md-kmp-default
suse enterprise server 15 SP5
5.14.21-150500.55.110.1
fixed
dlm-kmp-default
suse enterprise server 15 SP5
5.14.21-150500.55.110.1
fixed
gfs2-kmp-default
suse enterprise server 15 SP5
5.14.21-150500.55.110.1
fixed
kernel-64kb
suse enterprise server 15 SP3
5.3.18-150300.59.207.1
fixed
suse enterprise server 15 SP4
5.14.21-150400.24.167.1
fixed
suse enterprise server 15 SP5
5.14.21-150500.55.110.1
fixed
kernel-default
suse enterprise server 15 SP3
5.3.18-150300.59.207.1
fixed
suse enterprise server 15 SP4
5.14.21-150400.24.167.1
fixed
suse enterprise server 15 SP5
5.14.21-150500.55.110.1
fixed
kernel-default-base
suse enterprise server 15 SP3
5.3.18-150300.59.207.1.150300.18.124.1
fixed
suse enterprise server 15 SP4
5.14.21-150400.24.167.1.150400.24.84.1
fixed
suse enterprise server 15 SP5
5.14.21-150500.55.110.1.150500.6.51.3
fixed
kernel-obs-build
suse enterprise server 15 SP3
5.3.18-150300.59.207.1
fixed
suse enterprise server 15 SP4
5.14.21-150400.24.167.1
fixed
suse enterprise server 15 SP5
5.14.21-150500.55.110.1
fixed
kernel-preempt
suse enterprise server 15 SP3
5.3.18-150300.59.207.1
fixed
kernel-source
suse enterprise server 15 SP3
5.3.18-150300.59.207.1
fixed
suse enterprise server 15 SP4
5.14.21-150400.24.167.1
fixed
suse enterprise server 15 SP5
5.14.21-150500.55.110.1
fixed
kernel-zfcpdump
suse enterprise server 15 SP3
5.3.18-150300.59.207.1
fixed
suse enterprise server 15 SP4
5.14.21-150400.24.167.1
fixed
suse enterprise server 15 SP5
5.14.21-150500.55.110.1
fixed
ocfs2-kmp-default
suse enterprise server 15 SP5
5.14.21-150500.55.110.1
fixed
reiserfs-kmp-default
suse enterprise server 15 SP3
5.3.18-150300.59.207.1
fixed
suse enterprise server 15 SP4
5.14.21-150400.24.167.1
fixed
suse enterprise server 15 SP5
5.14.21-150500.55.110.1
fixed
Amazon Linux logo
Amazon Linux Releases
Amazon Package
Release
kernel
Amazon Linux 2
0:4.14.301-224.520.amzn2
fixed
kernel-debuginfo
Amazon Linux 2
0:4.14.301-224.520.amzn2
fixed
kernel-debuginfo-common-aarch64
Amazon Linux 2
0:4.14.301-224.520.amzn2
fixed
kernel-debuginfo-common-x86_64
Amazon Linux 2
0:4.14.301-224.520.amzn2
fixed
kernel-devel
Amazon Linux 2
0:4.14.301-224.520.amzn2
fixed
kernel-headers
Amazon Linux 2
0:4.14.301-224.520.amzn2
fixed
kernel-livepatch-4.14.301-224.520
Amazon Linux 2
0:1.0-0.amzn2
fixed
kernel-tools
Amazon Linux 2
0:4.14.301-224.520.amzn2
fixed
kernel-tools-debuginfo
Amazon Linux 2
0:4.14.301-224.520.amzn2
fixed
kernel-tools-devel
Amazon Linux 2
0:4.14.301-224.520.amzn2
fixed
perf
Amazon Linux 2
0:4.14.301-224.520.amzn2
fixed
perf-debuginfo
Amazon Linux 2
0:4.14.301-224.520.amzn2
fixed
python-perf
Amazon Linux 2
0:4.14.301-224.520.amzn2
fixed
python-perf-debuginfo
Amazon Linux 2
0:4.14.301-224.520.amzn2
fixed