In the Linux kernel, the following vulnerability has been resolved:
KVM: s390: fix setting of fpc register
kvm_arch_vcpu_ioctl_set_fpu() allows to set the floating point control (fpc) register of a guest cpu. The new value is tested for validity by temporarily loading it into the fpc register.
This may lead to corruption of the fpc register of the host process: if an interrupt happens while the value is temporarily loaded into the fpc register, and within interrupt context floating point or vector registers are used, the current fp/vx registers are saved with save_fpu_regs() assuming they belong to user space and will be loaded into fp/vx registers when returning to user space.
test_fp_ctl() restores the original user space / host process fpc register value, however it will be discarded, when returning to user space.
In result the host process will incorrectly continue to run with the value that was supposed to be used for a guest cpu.
Fix this by simply removing the test. There is another test right before the SIE context is entered which will handles invalid values.
This results in a change of behaviour: invalid values will now be accepted instead of that the ioctl fails with -EINVAL. This seems to be acceptable, given that this interface is most likely not used anymore, and this is in addition the same behaviour implemented with the memory mapped interface (replace invalid values with zero) - see sync_regs() in kvm-s390.c.
CVSS Details
- CVSS 3.1 Base Score: 4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-docUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-64k-modules-extraUpgrade kernel-64k-debugUpgrade rvUpgrade kernel-64k-debug-modules-coreUpgrade kernel-toolsUpgrade kernel-rt-debug-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rtUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debugUpgrade kernel-rt-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-64k-debug-modulesUpgrade perfUpgrade kernel-develUpgrade kernel-zfcpdump-coreUpgrade bpftoolUpgrade kernel-rt-modules-coreUpgrade kernel-rt-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-64k-debug-develUpgrade kernel-debug-modules-extraUpgrade kernel-tools-libsUpgrade kernel-rt-debug-develUpgrade kernel-64k-modulesUpgrade kernel-64kUpgrade kernel-64k-devel-matchedUpgrade kernel-headersUpgrade kernel-debug-coreUpgrade kernel-coreUpgrade kernel-64k-debug-coreUpgrade libperfUpgrade kernel-modules-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-cross-headersUpgrade python3-perfUpgrade rtlaUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-uki-virtUpgrade kernel-rt-debug-modulesUpgrade kernel-debugUpgrade kernel-rt-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-64k-coreUpgrade kernel-devel-matchedUpgrade kernelUpgrade kernel-64k-develUpgrade kernel-debug-modulesUpgrade kernel-debug-uki-virtUpgrade kernel-64k-modules-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-modulesUpgrade kernel-debug-devel | Nov 4, 2024 | Mar 6, 2024 |
| Debian | — | Upgrade linux | May 8, 2024 | Mar 6, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libs | Jul 16, 2024 | Mar 6, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade bpftool | Jun 26, 2024 | Mar 6, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libs | Jul 1, 2024 | Mar 6, 2024 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade python-perfUpgrade bpftoolUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-toolsUpgrade perfUpgrade python3-perf | Jul 23, 2024 | Mar 6, 2024 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libs | Jul 17, 2024 | Mar 6, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Sep 13, 2024 | Mar 6, 2024 |
| Suse | — | Upgrade kernel-default-manUpgrade kernel-kvmsmallUpgrade kernel-kvmsmall-develUpgrade ocfs2-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade gfs2-kmp-azureUpgrade kselftests-kmp-azureUpgrade kernel-macrosUpgrade kernel-docs-htmlUpgrade dtb-amdUpgrade kernel-devel-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-appleUpgrade kselftests-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-rtUpgrade kernel-64kb-optionalUpgrade dtb-apmUpgrade dtb-renesasUpgrade kernel-azure-optionalUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-optionalUpgrade kernel-azure-baseUpgrade kernel-azure-livepatch-develUpgrade kernel-source-azureUpgrade kernel-default-livepatchUpgrade kernel-sourceUpgrade dtb-allwinnerUpgrade kernel-rt_debugUpgrade dtb-exynosUpgrade dtb-marvellUpgrade dtb-broadcomUpgrade gfs2-kmp-64kbUpgrade kernel-64kb-develUpgrade kernel-syms-azureUpgrade dlm-kmp-64kbUpgrade kernel-debug-develUpgrade dtb-amazonUpgrade kernel-default-vdsoUpgrade kernel-symsUpgrade dtb-socionextUpgrade kernel-default-extraUpgrade kernel-source-rtUpgrade kernel-debugUpgrade dtb-lgUpgrade dtb-freescaleUpgrade gfs2-kmp-rtUpgrade dtb-amlogicUpgrade kernel-64kbUpgrade kernel-obs-qaUpgrade ocfs2-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-64kb-livepatch-develUpgrade dtb-alteraUpgrade kernel-default-develUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-64kbUpgrade dtb-hisiliconUpgrade reiserfs-kmp-defaultUpgrade kernel-azure-vdsoUpgrade dtb-caviumUpgrade kernel-azure-extraUpgrade dtb-qcomUpgrade cluster-md-kmp-64kbUpgrade kernel-azureUpgrade dtb-xilinxUpgrade kernel-default-optionalUpgrade kernel-default-baseUpgrade kernel-defaultUpgrade kernel-default-base-rebuildUpgrade dtb-nvidiaUpgrade kernel-syms-rtUpgrade kernel-source-vanillaUpgrade kernel-preempt-develUpgrade kernel-rt-extraUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade kernel-debug-vdsoUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade dtb-mediatekUpgrade reiserfs-kmp-azureUpgrade kernel-obs-buildUpgrade kernel-rt-vdsoUpgrade kernel-rt-develUpgrade gfs2-kmp-defaultUpgrade dtb-sprdUpgrade cluster-md-kmp-rtUpgrade dlm-kmp-azureUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-preemptUpgrade cluster-md-kmp-defaultUpgrade kernel-devel-rtUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-extraUpgrade dlm-kmp-rtUpgrade kernel-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-azure-develUpgrade dtb-rockchipUpgrade kernel-rt-livepatchUpgrade kselftests-kmp-defaultUpgrade kernel-docsUpgrade kernel-debug-livepatch-develUpgrade kernel-develUpgrade dtb-arm | Mar 14, 2024 | Mar 6, 2024 |
| Ubuntu | — | Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-azureUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-starfiveUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-laptop-23.10Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-5.15.0-1058-kvmUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-6.5.0-1024-oemUpgrade linux-image-nvidia-64k-6.5Upgrade linux-image-oem-22.04bUpgrade linux-image-aws-lts-22.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-106-lowlatencyUpgrade linux-image-5.15.0-106-lowlatency-64kUpgrade linux-image-azure-cvmUpgrade linux-image-6.5.0-1021-awsUpgrade linux-image-6.5.0-1017-laptopUpgrade linux-image-aws-lts-20.04Upgrade linux-image-awsUpgrade linux-image-5.4.0-1112-kvmUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-raspiUpgrade linux-image-raspi2Upgrade linux-image-azure-fdeUpgrade linux-image-6.5.0-1021-nvidia-64kUpgrade linux-image-5.4.0-1128-gcpUpgrade linux-image-6.5.0-1024-oracleUpgrade linux-image-5.15.0-1061-awsUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1044-gkeopUpgrade linux-image-6.5.0-1018-raspiUpgrade linux-image-oem-22.04aUpgrade linux-image-5.4.0-1071-ibmUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1058-gkeUpgrade linux-image-6.1.0-1035-oemUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-1063-azure-fdeUpgrade linux-image-oem-20.04dUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1054-raspiUpgrade linux-image-5.4.0-1123-oracleUpgrade linux-image-nvidia-6.5Upgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1063-azureUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-106-generic-64kUpgrade linux-image-5.15.0-1057-intel-iotgUpgrade linux-image-6.5.0-41-generic-64kUpgrade linux-image-6.5.0-1015-starfiveUpgrade linux-image-6.5.0-41-genericUpgrade linux-image-6.5.0-1021-nvidiaUpgrade linux-image-5.15.0-106-genericUpgrade linux-image-oem-22.04cUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oem-osp1Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-1058-intel-iotgUpgrade linux-image-5.15.0-1059-oracleUpgrade linux-image-5.4.0-1129-azureUpgrade linux-image-gcpUpgrade linux-image-bluefieldUpgrade linux-image-5.15.0-1054-ibmUpgrade linux-image-6.5.0-41-lowlatencyUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-5.4.0-181-genericUpgrade linux-image-5.4.0-181-generic-lpaeUpgrade linux-image-5.15.0-106-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-xilinx-zynqmpUpgrade linux-image-oem-20.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-6.5.0-1022-azureUpgrade linux-image-azure-lts-20.04Upgrade linux-image-oem-22.04Upgrade linux-image-6.5.0-41-lowlatency-64kUpgrade linux-image-5.4.0-181-lowlatencyUpgrade linux-image-6.5.0-1022-azure-fdeUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.5.0-1024-oracle-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-5.4.0-1084-bluefieldUpgrade linux-image-5.4.0-1124-awsUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-oracle-lts-22.04Upgrade linux-image-5.4.0-1091-gkeopUpgrade linux-image-azure-lts-22.04Upgrade linux-image-intelUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-nvidiaUpgrade linux-image-5.4.0-1036-iotUpgrade linux-image-gkeop-5.4Upgrade linux-image-6.5.0-1022-gcpUpgrade linux-image-oracle-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1054-nvidia-lowlatencyUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-generic-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-oem-20.04cUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1054-nvidiaUpgrade linux-image-gkeopUpgrade linux-image-5.4.0-1043-xilinx-zynqmpUpgrade linux-image-intel-iotgUpgrade linux-image-oemUpgrade linux-image-5.15.0-1059-gcpUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-1108-raspiUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oracleUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-lowlatency-64kUpgrade linux-image-gke | Mar 12, 2024 | Mar 6, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Mar 6, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub