In the Linux kernel, the following vulnerability has been resolved:
KVM: s390: fix setting of fpc register
kvm_arch_vcpu_ioctl_set_fpu() allows to set the floating point control (fpc) register of a guest cpu. The new value is tested for validity by temporarily loading it into the fpc register.
This may lead to corruption of the fpc register of the host process: if an interrupt happens while the value is temporarily loaded into the fpc register, and within interrupt context floating point or vector registers are used, the current fp/vx registers are saved with save_fpu_regs() assuming they belong to user space and will be loaded into fp/vx registers when returning to user space.
test_fp_ctl() restores the original user space / host process fpc register value, however it will be discarded, when returning to user space.
In result the host process will incorrectly continue to run with the value that was supposed to be used for a guest cpu.
Fix this by simply removing the test. There is another test right before the SIE context is entered which will handles invalid values.
This results in a change of behaviour: invalid values will now be accepted instead of that the ioctl fails with -EINVAL. This seems to be acceptable, given that this interface is most likely not used anymore, and this is in addition the same behaviour implemented with the memory mapped interface (replace invalid values with zero) - see sync_regs() in kvm-s390.c.
CVSS Details
- CVSS 3.1 Base Score: 4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-64kUpgrade kernel-debug-devel-matchedUpgrade kernel-debug-uki-virtUpgrade libperfUpgrade kernel-uki-virtUpgrade kernel-64k-develUpgrade kernel-debugUpgrade kernel-64k-coreUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-modules-coreUpgrade rtlaUpgrade kernel-modules-extraUpgrade kernel-rt-coreUpgrade kernel-debug-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-coreUpgrade kernel-64k-debug-coreUpgrade kernel-headersUpgrade python3-perfUpgrade kernel-cross-headersUpgrade kernel-64k-modulesUpgrade kernel-rt-debug-develUpgrade kernelUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-develUpgrade kernel-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-develUpgrade kernel-64k-modules-coreUpgrade kernel-modules-coreUpgrade kernel-debug-modulesUpgrade kernel-64k-devel-matchedUpgrade kernel-64k-debug-modules-extraUpgrade kernel-64k-debug-modulesUpgrade kernel-tools-libsUpgrade kernel-rt-develUpgrade kernel-64k-debug-develUpgrade kernel-rt-debug-coreUpgrade perfUpgrade kernel-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-debug-modules-coreUpgrade kernel-docUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdumpUpgrade kernel-debug-modules-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-modules-extraUpgrade bpftoolUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-modules-extraUpgrade kernel-toolsUpgrade kernel-rt-debugUpgrade kernel-tools-libs-develUpgrade kernel-rtUpgrade kernel-rt-debug-modules-extraUpgrade kernel-64k-modules-extraUpgrade kernel-rt-modules-coreUpgrade rvUpgrade kernel-rt-debug-modules-coreUpgrade kernel-64k-debug | Nov 4, 2024 | Mar 6, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | Mar 6, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel | Jul 16, 2024 | Mar 6, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade bpftoolUpgrade python3-perf | Jun 26, 2024 | Mar 6, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perf | Jul 1, 2024 | Mar 6, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernelUpgrade bpftoolUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-develUpgrade perfUpgrade python3-perfUpgrade kernel-headersUpgrade kernel-tools | Jul 23, 2024 | Mar 6, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libs | Jul 17, 2024 | Mar 6, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Sep 13, 2024 | Mar 6, 2024 |
| Suse | — | Upgrade dtb-amazonUpgrade cluster-md-kmp-azureUpgrade kernel-source-azureUpgrade kernel-rt_debugUpgrade kernel-64kb-optionalUpgrade dtb-lgUpgrade ocfs2-kmp-64kbUpgrade dtb-amlogicUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade dtb-appleUpgrade kernel-source-rtUpgrade ocfs2-kmp-azureUpgrade dtb-socionextUpgrade kernel-default-develUpgrade dtb-alteraUpgrade kernel-zfcpdumpUpgrade kernel-default-vdsoUpgrade dtb-apmUpgrade kernel-azure-optionalUpgrade kernel-obs-qaUpgrade kernel-devel-azureUpgrade ocfs2-kmp-rtUpgrade kernel-64kb-develUpgrade kernel-macrosUpgrade gfs2-kmp-rtUpgrade kselftests-kmp-64kbUpgrade dtb-hisiliconUpgrade dtb-allwinnerUpgrade kernel-azure-extraUpgrade kernel-azure-vdsoUpgrade dtb-caviumUpgrade dtb-amdUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade gfs2-kmp-azureUpgrade kernel-default-extraUpgrade kernel-symsUpgrade dtb-freescaleUpgrade ocfs2-kmp-defaultUpgrade dtb-broadcomUpgrade gfs2-kmp-64kbUpgrade kernel-sourceUpgrade kernel-default-livepatchUpgrade kernel-rt-optionalUpgrade kernel-azure-livepatch-develUpgrade dtb-exynosUpgrade dlm-kmp-64kbUpgrade kernel-64kbUpgrade kernel-azure-baseUpgrade kernel-kvmsmall-vdsoUpgrade kernel-syms-azureUpgrade dtb-renesasUpgrade kernel-rt_debug-develUpgrade dtb-marvellUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-default-manUpgrade kernel-docs-htmlUpgrade kernel-kvmsmallUpgrade reiserfs-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade dlm-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-livepatchUpgrade kernel-obs-buildUpgrade gfs2-kmp-defaultUpgrade dtb-sprdUpgrade kernel-azureUpgrade kernel-default-optionalUpgrade kernel-azure-develUpgrade kernel-rtUpgrade dlm-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade dtb-xilinxUpgrade kernel-default-base-rebuildUpgrade cluster-md-kmp-64kbUpgrade kernel-defaultUpgrade dtb-armUpgrade cluster-md-kmp-rtUpgrade kernel-develUpgrade kernel-default-baseUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-debug-vdsoUpgrade kernel-64kb-extraUpgrade kernel-preempt-develUpgrade kernel-syms-rtUpgrade dtb-qcomUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-defaultUpgrade dtb-nvidiaUpgrade kernel-rt-extraUpgrade kernel-docsUpgrade kernel-debug-livepatch-develUpgrade kselftests-kmp-rtUpgrade dtb-rockchipUpgrade dlm-kmp-defaultUpgrade kernel-rt-vdsoUpgrade kernel-rt-develUpgrade dtb-mediatekUpgrade kernel-preemptUpgrade kernel-devel-rtUpgrade kernel-default-livepatch-develUpgrade cluster-md-kmp-default | Mar 14, 2024 | Mar 6, 2024 |
| Ubuntu | — | Upgrade linux-image-kvmUpgrade linux-image-6.1.0-1035-oemUpgrade linux-image-aws-lts-22.04Upgrade linux-image-nvidia-6.5Upgrade linux-image-6.5.0-1021-nvidia-64kUpgrade linux-image-6.5.0-1024-oracleUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1054-raspiUpgrade linux-image-oem-20.04dUpgrade linux-image-5.15.0-1058-kvmUpgrade linux-image-aws-lts-20.04Upgrade linux-image-raspi2Upgrade linux-image-raspiUpgrade linux-image-6.5.0-1024-oemUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-1071-ibmUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1058-gkeUpgrade linux-image-azure-cvmUpgrade linux-image-azure-fdeUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1063-azureUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-6.5.0-1021-awsUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.4.0-1123-oracleUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-starfiveUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-106-lowlatencyUpgrade linux-image-laptop-23.10Upgrade linux-image-5.15.0-1061-awsUpgrade linux-image-5.4.0-1128-gcpUpgrade linux-image-5.15.0-106-lowlatency-64kUpgrade linux-image-5.15.0-1063-azure-fdeUpgrade linux-image-nvidia-64k-6.5Upgrade linux-image-5.15.0-1044-gkeopUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-6.5.0-1018-raspiUpgrade linux-image-azureUpgrade linux-image-oem-22.04bUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-awsUpgrade linux-image-6.5.0-1017-laptopUpgrade linux-image-5.4.0-1112-kvmUpgrade linux-image-gkeUpgrade linux-image-5.15.0-106-generic-lpaeUpgrade linux-image-intelUpgrade linux-image-5.15.0-1054-nvidiaUpgrade linux-image-5.15.0-106-genericUpgrade linux-image-6.5.0-1015-starfiveUpgrade linux-image-nvidiaUpgrade linux-image-6.5.0-41-genericUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-1054-nvidia-lowlatencyUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-5.15.0-1054-ibmUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-1057-intel-iotgUpgrade linux-image-oem-osp1Upgrade linux-image-6.5.0-1021-nvidiaUpgrade linux-image-5.15.0-1059-gcpUpgrade linux-image-gkeop-5.15Upgrade linux-image-6.5.0-1022-azure-fdeUpgrade linux-image-5.4.0-181-lowlatencyUpgrade linux-image-5.4.0-1129-azureUpgrade linux-image-5.4.0-1084-bluefieldUpgrade linux-image-bluefieldUpgrade linux-image-5.15.0-1059-oracleUpgrade linux-image-5.4.0-1124-awsUpgrade linux-image-genericUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-gcpUpgrade linux-image-6.5.0-41-lowlatencyUpgrade linux-image-6.5.0-1024-oracle-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.5.0-41-lowlatency-64kUpgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-106-generic-64kUpgrade linux-image-oemUpgrade linux-image-virtualUpgrade linux-image-oracle-64kUpgrade linux-image-5.4.0-1036-iotUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-generic-lpaeUpgrade linux-image-6.5.0-1022-gcpUpgrade linux-image-azure-lts-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-generic-64kUpgrade linux-image-gkeopUpgrade linux-image-6.5.0-1022-azureUpgrade linux-image-5.4.0-1043-xilinx-zynqmpUpgrade linux-image-oem-22.04dUpgrade linux-image-oem-20.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.4.0-1091-gkeopUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.4.0-1108-raspiUpgrade linux-image-oracleUpgrade linux-image-oem-20.04bUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.5.0-41-generic-64kUpgrade linux-image-5.4.0-181-generic-lpaeUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.4.0-181-genericUpgrade linux-image-oem-22.04cUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-oracle-lts-22.04 | Mar 12, 2024 | Mar 6, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 6, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub