KVM: s390: pv: fix index value of replaced ASCE (Linux Linux)
En bref
- Source
- NVD
- EPSS
- EPSS 0.22 % · centile 12 ()
- État
- PUBLISHED
- Publiée
- Mise à jour
- Attribuée par
- Linux
- Statut NVD
- Deferred
Rechercher sur…
Description
In the Linux kernel, the following vulnerability has been resolved: KVM: s390: pv: fix index value of replaced ASCE The index field of the struct page corresponding to a guest ASCE should be 0. When replacing the ASCE in s390_replace_asce(), the index of the new ASCE should also be set to 0. Having the wrong index might lead to the wrong addresses being passed around when notifying pte invalidations, and eventually to validity intercepts (VM crash) if the prefix gets unmapped and the notifier gets called with the wrong address.
Références
- https://git.kernel.org/stable/c/8e635da0e0d3cb45e32fa79b36218fb98281bc10
- https://git.kernel.org/stable/c/49a2686adddebe1ae76b4d368383208656ef6606
- https://git.kernel.org/stable/c/017f686bcb536ff23d49c143fdf9d1fd89a9a924
- https://git.kernel.org/stable/c/f1c7a776338f2ac5e34da40e58fe9f33ea390a5e
- https://git.kernel.org/stable/c/c2fceb59bbda16468bda82b002383bff59de89ab
Scores
| Version | Score | Vecteur | Évalué par |
|---|---|---|---|
| CVSS 3.1 | HIGH 8.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H | Linux |
| CVSS 3.1 | HIGH 8.8 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H | NVD · 416baaa9-dc9f-4396-8d5f-8c081fb06d67 (Secondary) |
Références européennes
- ENISA EUVD · EUVD-2023-60353
- GCVE · GCVE-0-2023-54092
Avis du CERT-FR
- CERTFR-2026-AVI-0369 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0247 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0225 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0170 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0108 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
Produits affectés
| Produit | Versions |
|---|---|
| Linux · Linux | affected 9d216035d173214cd33712d67d89220ef2283ebf < 8e635da0e0d3cb45e32fa79b36218fb98281bc10 ; affected 81ea65c9aefe100a9ace3082649bd84ae7dd9764 < 49a2686adddebe1ae76b4d368383208656ef6606 ; affected faa2f72cb3569256480c5540d242c84e99965160 < 017f686bcb536ff23d49c143fdf9d1fd89a9a924 ; affected faa2f72cb3569256480c5540d242c84e99965160 < f1c7a776338f2ac5e34da40e58fe9f33ea390a5e ; affected faa2f72cb3569256480c5540d242c84e99965160 < c2fceb59bbda16468bda82b002383bff59de89ab ; affected b5477f53e1d4de6191f50748a027251b14952eeb |
| Linux · Linux | affected 6.0 ; unaffected 0 < 6.0 ; unaffected 5.10.190 ≤ 5.10.* ; unaffected 5.15.124 ≤ 5.15.* ; unaffected 6.1.43 ≤ 6.1.* ; unaffected 6.4.8 ≤ 6.4.* |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |