In the Linux kernel, the following vulnerability has been resolved:
KVM: s390: fix setting of fpc register
kvm_arch_vcpu_ioctl_set_fpu() allows to set the floating point control (fpc) register of a guest cpu. The new value is tested for validity by temporarily loading it into the fpc register.
This may lead to corruption of the fpc register of the host process: if an interrupt happens while the value is temporarily loaded into the fpc register, and within interrupt context floating point or vector registers are used, the current fp/vx registers are saved with save_fpu_regs() assuming they belong to user space and will be loaded into fp/vx registers when returning to user space.
test_fp_ctl() restores the original user space / host process fpc register value, however it will be discarded, when returning to user space.
In result the host process will incorrectly continue to run with the value that was supposed to be used for a guest cpu.
Fix this by simply removing the test. There is another test right before the SIE context is entered which will handles invalid values.
This results in a change of behaviour: invalid values will now be accepted instead of that the ioctl fails with -EINVAL. This seems to be acceptable, given that this interface is most likely not used anymore, and this is in addition the same behaviour implemented with the memory mapped interface (replace invalid values with zero) - see sync_regs() in kvm-s390.c.
CVSS Details
- CVSS 3.1 Base Score: 4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdump-develUpgrade kernel-64k-modules-coreUpgrade python3-perfUpgrade kernel-rt-debug-modulesUpgrade kernel-modules-coreUpgrade kernel-coreUpgrade kernel-rt-debug-develUpgrade kernel-64k-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-64k-develUpgrade kernel-rt-coreUpgrade kernel-modules-extraUpgrade kernel-uki-virtUpgrade kernel-debugUpgrade libperfUpgrade kernel-debug-uki-virtUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-modules-extraUpgrade rtlaUpgrade kernel-debug-modulesUpgrade kernel-headersUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debug-coreUpgrade kernel-64k-modulesUpgrade kernel-64k-coreUpgrade kernel-64kUpgrade kernel-debug-develUpgrade kernel-devel-matchedUpgrade kernelUpgrade kernel-64k-devel-matchedUpgrade kernel-debug-devel-matchedUpgrade kernel-cross-headersUpgrade kernel-64k-debug-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-zfcpdump-modulesUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-64k-debugUpgrade kernel-tools-libsUpgrade kernel-zfcpdumpUpgrade kernel-64k-debug-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-64k-modules-extraUpgrade perfUpgrade kernel-rt-debug-coreUpgrade kernel-develUpgrade kernel-64k-debug-develUpgrade kernel-rt-develUpgrade bpftoolUpgrade kernel-rt-debugUpgrade kernel-rt-debug-modules-coreUpgrade kernel-tools-libs-develUpgrade rvUpgrade kernel-debug-modules-coreUpgrade kernel-docUpgrade kernel-rtUpgrade kernel-rt-modules-extraUpgrade kernel-64k-debug-modulesUpgrade kernel-tools | Nov 4, 2024 | Mar 6, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | Mar 6, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-tools | Jul 16, 2024 | Mar 6, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade bpftoolUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-tools | Jun 26, 2024 | Mar 6, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade bpftool | Jul 1, 2024 | Mar 6, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade python-perfUpgrade kernelUpgrade perfUpgrade kernel-headersUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-devel | Jul 23, 2024 | Mar 6, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libs | Jul 17, 2024 | Mar 6, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Sep 13, 2024 | Mar 6, 2024 |
| Suse | — | Upgrade kernel-rt_debug-livepatch-develUpgrade kernel-debug-vdsoUpgrade kernel-devel-rtUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-defaultUpgrade kernel-obs-buildUpgrade kernel-rt-vdsoUpgrade reiserfs-kmp-azureUpgrade kernel-azure-develUpgrade kernel-rtUpgrade kernel-rt-livepatchUpgrade dtb-sprdUpgrade dlm-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-extraUpgrade kernel-rt_debug-vdsoUpgrade dlm-kmp-rtUpgrade kernel-rt-develUpgrade kernel-defaultUpgrade dtb-nvidiaUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-azureUpgrade kernel-default-livepatch-develUpgrade dtb-rockchipUpgrade dtb-xilinxUpgrade cluster-md-kmp-64kbUpgrade kernel-preemptUpgrade kernel-debug-livepatch-develUpgrade kernel-default-optionalUpgrade kernel-default-baseUpgrade dtb-armUpgrade dtb-mediatekUpgrade kernel-develUpgrade cluster-md-kmp-rtUpgrade kernel-64kb-extraUpgrade kernel-docsUpgrade dtb-qcomUpgrade kernel-azureUpgrade kernel-preempt-develUpgrade kernel-source-vanillaUpgrade kernel-syms-rtUpgrade kselftests-kmp-rtUpgrade dtb-hisiliconUpgrade kernel-azure-vdsoUpgrade kernel-azure-extraUpgrade kernel-rt_debugUpgrade kernel-kvmsmall-vdsoUpgrade kernel-64kb-optionalUpgrade dtb-lgUpgrade dtb-caviumUpgrade kernel-azure-baseUpgrade cluster-md-kmp-azureUpgrade kselftests-kmp-azureUpgrade kernel-source-azureUpgrade kernel-macrosUpgrade ocfs2-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade kernel-kvmsmallUpgrade kernel-docs-htmlUpgrade kernel-default-manUpgrade reiserfs-kmp-64kbUpgrade dtb-amlogicUpgrade dtb-amazonUpgrade dtb-exynosUpgrade dtb-broadcomUpgrade dlm-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-sourceUpgrade kernel-rt-optionalUpgrade kernel-default-livepatchUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-azure-livepatch-develUpgrade gfs2-kmp-64kbUpgrade dtb-marvellUpgrade dtb-freescaleUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-default-extraUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kbUpgrade gfs2-kmp-rtUpgrade kernel-azure-optionalUpgrade dtb-amdUpgrade dtb-allwinnerUpgrade ocfs2-kmp-rtUpgrade dtb-renesasUpgrade kernel-symsUpgrade kselftests-kmp-64kbUpgrade kernel-devel-azureUpgrade dtb-apmUpgrade kernel-default-vdsoUpgrade dtb-socionextUpgrade kernel-source-rtUpgrade dtb-alteraUpgrade kernel-obs-qaUpgrade kernel-kvmsmall-livepatch-develUpgrade ocfs2-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-64kb-develUpgrade kernel-default-develUpgrade gfs2-kmp-azureUpgrade dtb-appleUpgrade kernel-rt_debug-devel | Mar 14, 2024 | Mar 6, 2024 |
| Ubuntu | — | Upgrade linux-image-5.15.0-106-lowlatency-64kUpgrade linux-image-5.15.0-106-lowlatencyUpgrade linux-image-6.5.0-1017-laptopUpgrade linux-image-5.4.0-1071-ibmUpgrade linux-image-kvmUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.4.0-1128-gcpUpgrade linux-image-6.5.0-1024-oracleUpgrade linux-image-5.15.0-1044-gkeopUpgrade linux-image-5.15.0-1063-azure-fdeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1063-azureUpgrade linux-image-azure-fdeUpgrade linux-image-oem-22.04aUpgrade linux-image-6.5.0-1021-awsUpgrade linux-image-ibmUpgrade linux-image-nvidia-6.5Upgrade linux-image-azure-cvmUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.4.0-1123-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-raspi2Upgrade linux-image-5.15.0-1054-raspiUpgrade linux-image-5.15.0-1058-kvmUpgrade linux-image-raspiUpgrade linux-image-5.4.0-1112-kvmUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.5.0-1018-raspiUpgrade linux-image-nvidia-64k-6.5Upgrade linux-image-awsUpgrade linux-image-aws-lts-20.04Upgrade linux-image-6.1.0-1035-oemUpgrade linux-image-aws-lts-22.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-oem-22.04bUpgrade linux-image-laptop-23.10Upgrade linux-image-starfiveUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.15.0-1061-awsUpgrade linux-image-5.15.0-1058-gkeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-6.5.0-1021-nvidia-64kUpgrade linux-image-6.5.0-1024-oemUpgrade linux-image-azureUpgrade linux-image-oem-20.04dUpgrade linux-image-5.4.0-181-generic-lpaeUpgrade linux-image-gkeUpgrade linux-image-6.5.0-1022-azureUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.5.0-41-lowlatency-64kUpgrade linux-image-6.5.0-1024-oracle-64kUpgrade linux-image-oem-20.04Upgrade linux-image-oem-22.04dUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.4.0-181-lowlatencyUpgrade linux-image-5.4.0-1084-bluefieldUpgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-106-generic-lpaeUpgrade linux-image-5.15.0-1059-oracleUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-6.5.0-41-generic-64kUpgrade linux-image-5.4.0-181-genericUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-1124-awsUpgrade linux-image-5.4.0-1091-gkeopUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-gkeop-5.15Upgrade linux-image-6.5.0-1022-gcpUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.4.0-1129-azureUpgrade linux-image-bluefieldUpgrade linux-image-6.5.0-41-lowlatencyUpgrade linux-image-5.15.0-106-generic-64kUpgrade linux-image-5.15.0-1054-ibmUpgrade linux-image-oracle-64kUpgrade linux-image-5.4.0-1036-iotUpgrade linux-image-virtualUpgrade linux-image-oemUpgrade linux-image-oem-20.04cUpgrade linux-image-gkeop-5.4Upgrade linux-image-6.5.0-1021-nvidiaUpgrade linux-image-5.15.0-106-genericUpgrade linux-image-6.5.0-1015-starfiveUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-nvidiaUpgrade linux-image-intelUpgrade linux-image-oracleUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oem-20.04bUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-1108-raspiUpgrade linux-image-oem-22.04cUpgrade linux-image-5.15.0-1059-gcpUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-intel-iotgUpgrade linux-image-oem-osp1Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.15.0-1054-nvidiaUpgrade linux-image-6.5.0-41-genericUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.4.0-1043-xilinx-zynqmpUpgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1057-intel-iotgUpgrade linux-image-5.15.0-1054-nvidia-lowlatencyUpgrade linux-image-genericUpgrade linux-image-6.5.0-1022-azure-fde | Mar 12, 2024 | Mar 6, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 6, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub