In the Linux kernel, the following vulnerability has been resolved:
KVM: s390: fix setting of fpc register
kvm_arch_vcpu_ioctl_set_fpu() allows to set the floating point control (fpc) register of a guest cpu. The new value is tested for validity by temporarily loading it into the fpc register.
This may lead to corruption of the fpc register of the host process: if an interrupt happens while the value is temporarily loaded into the fpc register, and within interrupt context floating point or vector registers are used, the current fp/vx registers are saved with save_fpu_regs() assuming they belong to user space and will be loaded into fp/vx registers when returning to user space.
test_fp_ctl() restores the original user space / host process fpc register value, however it will be discarded, when returning to user space.
In result the host process will incorrectly continue to run with the value that was supposed to be used for a guest cpu.
Fix this by simply removing the test. There is another test right before the SIE context is entered which will handles invalid values.
This results in a change of behaviour: invalid values will now be accepted instead of that the ioctl fails with -EINVAL. This seems to be acceptable, given that this interface is most likely not used anymore, and this is in addition the same behaviour implemented with the memory mapped interface (replace invalid values with zero) - see sync_regs() in kvm-s390.c.
CVSS Details
- CVSS 3.1 Base Score: 4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-modules-extraUpgrade kernel-toolsUpgrade kernel-64k-debug-modules-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debugUpgrade kernel-rt-modulesUpgrade bpftoolUpgrade kernel-docUpgrade rvUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-rt-develUpgrade kernel-rtUpgrade kernel-64k-debugUpgrade kernel-tools-libsUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-64k-debug-develUpgrade kernel-64k-debug-modulesUpgrade kernel-debug-modules-coreUpgrade kernel-develUpgrade kernel-tools-libs-develUpgrade perfUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-debugUpgrade kernel-64k-devel-matchedUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-develUpgrade rtlaUpgrade kernel-devel-matchedUpgrade kernel-64k-develUpgrade kernel-debug-devel-matchedUpgrade kernel-modules-coreUpgrade kernel-rt-debug-develUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-modulesUpgrade kernel-modules-extraUpgrade kernel-64k-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-64k-modules-coreUpgrade kernel-64k-modulesUpgrade kernel-64k-debug-modules-extraUpgrade kernel-debug-coreUpgrade kernel-abi-stablelistsUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-64kUpgrade kernel-uki-virtUpgrade kernel-headersUpgrade python3-perfUpgrade libperfUpgrade kernel-64k-debug-coreUpgrade kernel-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-coreUpgrade kernel-debug-uki-virt | Nov 4, 2024 | Mar 6, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | Mar 6, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-tools | Jul 16, 2024 | Mar 6, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade python3-perf | Jun 26, 2024 | Mar 6, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel | Jul 1, 2024 | Mar 6, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-headersUpgrade python3-perfUpgrade kernel-develUpgrade kernel-toolsUpgrade perfUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-libsUpgrade python-perf | Jul 23, 2024 | Mar 6, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-tools | Jul 17, 2024 | Mar 6, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Sep 13, 2024 | Mar 6, 2024 |
| Suse | — | Upgrade dlm-kmp-64kbUpgrade dtb-broadcomUpgrade kernel-default-extraUpgrade dtb-exynosUpgrade kernel-kvmsmall-develUpgrade dtb-amlogicUpgrade kernel-64kbUpgrade gfs2-kmp-64kbUpgrade dtb-amdUpgrade ocfs2-kmp-defaultUpgrade kernel-rt_debugUpgrade kernel-default-manUpgrade cluster-md-kmp-azureUpgrade kselftests-kmp-azureUpgrade kernel-kvmsmallUpgrade kernel-debugUpgrade kernel-rt_debug-develUpgrade kernel-macrosUpgrade kernel-azure-baseUpgrade kernel-docs-htmlUpgrade dtb-apmUpgrade dtb-lgUpgrade kernel-64kb-optionalUpgrade kernel-default-livepatchUpgrade kernel-sourceUpgrade dtb-marvellUpgrade kernel-azure-livepatch-develUpgrade kernel-syms-azureUpgrade dtb-hisiliconUpgrade kernel-source-rtUpgrade kernel-azure-extraUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-azureUpgrade kernel-obs-qaUpgrade dtb-alteraUpgrade dtb-appleUpgrade gfs2-kmp-azureUpgrade kernel-64kb-develUpgrade kernel-default-develUpgrade reiserfs-kmp-defaultUpgrade dtb-amazonUpgrade gfs2-kmp-rtUpgrade dtb-freescaleUpgrade kernel-source-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-64kb-livepatch-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kselftests-kmp-64kbUpgrade kernel-devel-azureUpgrade kernel-symsUpgrade kernel-kvmsmall-vdsoUpgrade dtb-allwinnerUpgrade ocfs2-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade dtb-renesasUpgrade dtb-socionextUpgrade kernel-default-vdsoUpgrade kernel-azure-vdsoUpgrade kernel-rt-optionalUpgrade kernel-debug-develUpgrade kernel-azure-optionalUpgrade dtb-caviumUpgrade dlm-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-livepatch-develUpgrade gfs2-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade kernel-rt-vdsoUpgrade kernel-develUpgrade dtb-qcomUpgrade kernel-source-vanillaUpgrade kernel-azureUpgrade dtb-nvidiaUpgrade kernel-preempt-develUpgrade kernel-syms-rtUpgrade dtb-mediatekUpgrade kernel-rt-livepatchUpgrade kernel-rtUpgrade kernel-azure-develUpgrade dtb-xilinxUpgrade kselftests-kmp-defaultUpgrade kernel-rt-extraUpgrade kernel-docsUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-rtUpgrade kernel-debug-livepatch-develUpgrade dtb-rockchipUpgrade dlm-kmp-defaultUpgrade dlm-kmp-azureUpgrade kernel-preemptUpgrade kernel-default-base-rebuildUpgrade kernel-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-devel-rtUpgrade kernel-default-livepatch-develUpgrade kernel-debug-vdsoUpgrade kernel-64kb-extraUpgrade cluster-md-kmp-defaultUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-optionalUpgrade kernel-default-baseUpgrade dtb-armUpgrade cluster-md-kmp-rtUpgrade kernel-rt-develUpgrade kernel-obs-buildUpgrade dtb-sprd | Mar 14, 2024 | Mar 6, 2024 |
| Ubuntu | — | Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oem-osp1Upgrade linux-image-5.4.0-1036-iotUpgrade linux-image-oem-20.04cUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-20.04bUpgrade linux-image-oracleUpgrade linux-image-5.15.0-1054-nvidiaUpgrade linux-image-5.15.0-1057-intel-iotgUpgrade linux-image-5.4.0-1108-raspiUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.15.0-106-generic-lpaeUpgrade linux-image-bluefieldUpgrade linux-image-5.15.0-1054-ibmUpgrade linux-image-genericUpgrade linux-image-generic-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-oemUpgrade linux-image-5.4.0-181-generic-lpaeUpgrade linux-image-6.5.0-1024-oracle-64kUpgrade linux-image-5.15.0-1059-oracleUpgrade linux-image-5.4.0-181-genericUpgrade linux-image-6.5.0-41-generic-64kUpgrade linux-image-6.5.0-1015-starfiveUpgrade linux-image-6.5.0-41-lowlatencyUpgrade linux-image-5.4.0-1129-azureUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-gcpUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-1043-xilinx-zynqmpUpgrade linux-image-azure-lts-22.04Upgrade linux-image-intelUpgrade linux-image-nvidiaUpgrade linux-image-5.15.0-106-genericUpgrade linux-image-gkeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-6.5.0-41-genericUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-intel-iotgUpgrade linux-image-5.4.0-1091-gkeopUpgrade linux-image-gkeopUpgrade linux-image-5.4.0-1124-awsUpgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-6.5.0-41-lowlatency-64kUpgrade linux-image-5.4.0-1084-bluefieldUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.15.0-1059-gcpUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1054-nvidia-lowlatencyUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-6.5.0-1021-nvidiaUpgrade linux-image-gkeop-5.15Upgrade linux-image-oracle-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-6.5.0-1022-gcpUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-5.15.0-106-generic-64kUpgrade linux-image-6.5.0-1022-azure-fdeUpgrade linux-image-6.5.0-1022-azureUpgrade linux-image-oem-22.04dUpgrade linux-image-oem-20.04Upgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.4.0-181-lowlatencyUpgrade linux-image-oem-22.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-azure-cvmUpgrade linux-image-raspiUpgrade linux-image-6.5.0-1017-laptopUpgrade linux-image-5.4.0-1071-ibmUpgrade linux-image-5.15.0-1054-raspiUpgrade linux-image-kvmUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1058-kvmUpgrade linux-image-raspi2Upgrade linux-image-5.15.0-1061-awsUpgrade linux-image-aws-lts-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-5.4.0-1112-kvmUpgrade linux-image-aws-lts-22.04Upgrade linux-image-6.5.0-1024-oemUpgrade linux-image-laptop-23.10Upgrade linux-image-starfiveUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-nvidia-64k-6.5Upgrade linux-image-oem-22.04bUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-azureUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-6.5.0-1018-raspiUpgrade linux-image-awsUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-1128-gcpUpgrade linux-image-nvidia-6.5Upgrade linux-image-5.15.0-106-lowlatency-64kUpgrade linux-image-6.5.0-1024-oracleUpgrade linux-image-5.4.0-1123-oracleUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.5.0-1021-nvidia-64kUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1063-azure-fdeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1044-gkeopUpgrade linux-image-5.15.0-106-lowlatencyUpgrade linux-image-5.15.0-1058-gkeUpgrade linux-image-oem-22.04aUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-ibmUpgrade linux-image-6.5.0-1021-awsUpgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1063-azureUpgrade linux-image-6.1.0-1035-oemUpgrade linux-image-oem-20.04d | Mar 12, 2024 | Mar 6, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 6, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub