In the Linux kernel, the following vulnerability has been resolved:
kvm: s390: Reject memory region operations for ucontrol VMs
This change rejects the KVM_SET_USER_MEMORY_REGION and KVM_SET_USER_MEMORY_REGION2 ioctls when called on a ucontrol VM. This is necessary since ucontrol VMs have kvm->arch.gmap set to 0 and would thus result in a null pointer dereference further in. Memory management needs to be performed in userspace and using the ioctls KVM_S390_UCAS_MAP and KVM_S390_UCAS_UNMAP.
Also improve s390 specific documentation for KVM_SET_USER_MEMORY_REGION and KVM_SET_USER_MEMORY_REGION2.
[[email protected]: commit message spelling fix, subject prefix fix]
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 15, 2025 | Aug 17, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perf | Dec 12, 2024 | Aug 17, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade kernelUpgrade bpftoolUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libs | Dec 12, 2024 | Aug 17, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 17, 2024 |
| Suse | — | Upgrade kernel-develUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-azureUpgrade dtb-apmUpgrade dtb-xilinxUpgrade dtb-rockchipUpgrade gfs2-kmp-64kbUpgrade dtb-mediatekUpgrade kernel-default-baseUpgrade dtb-armUpgrade dtb-nvidiaUpgrade reiserfs-kmp-defaultUpgrade dtb-qcomUpgrade kernel-devel-rtUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-rt-livepatchUpgrade kernel-syms-rtUpgrade ocfs2-kmp-azureUpgrade kernel-symsUpgrade kernel-kvmsmallUpgrade kernel-rtUpgrade kernel-default-base-rebuildUpgrade kernel-default-livepatch-develUpgrade kernel-macrosUpgrade kselftests-kmp-defaultUpgrade kernel-debugUpgrade cluster-md-kmp-defaultUpgrade dtb-amlogicUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-rtUpgrade kernel-obs-qaUpgrade kernel-rt_debug-vdsoUpgrade kernel-docsUpgrade kernel-debug-livepatch-develUpgrade kernel-default-optionalUpgrade kernel-64kb-livepatch-develUpgrade gfs2-kmp-rtUpgrade kernel-rt-develUpgrade kernel-64kb-develUpgrade ocfs2-kmp-rtUpgrade cluster-md-kmp-rtUpgrade kernel-defaultUpgrade dlm-kmp-azureUpgrade kernel-azure-livepatch-develUpgrade kernel-source-rtUpgrade kernel-rt-vdsoUpgrade kernel-obs-buildUpgrade kernel-azure-vdsoUpgrade dtb-socionextUpgrade ocfs2-kmp-64kbUpgrade dtb-allwinnerUpgrade kernel-source-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-caviumUpgrade kernel-default-livepatchUpgrade kernel-azure-baseUpgrade kernel-docs-htmlUpgrade kernel-devel-azureUpgrade kernel-debug-vdsoUpgrade dtb-hisiliconUpgrade dtb-broadcomUpgrade kernel-rt_debug-develUpgrade dtb-amdUpgrade kernel-kvmsmall-develUpgrade dtb-marvellUpgrade cluster-md-kmp-azureUpgrade dtb-alteraUpgrade dtb-freescaleUpgrade kernel-rt-optionalUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt-livepatch-develUpgrade dtb-renesasUpgrade ocfs2-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debugUpgrade kselftests-kmp-64kbUpgrade kernel-64kb-extraUpgrade gfs2-kmp-azureUpgrade gfs2-kmp-defaultUpgrade dtb-exynosUpgrade dtb-appleUpgrade kernel-azure-extraUpgrade kernel-64kb-optionalUpgrade dtb-lgUpgrade kernel-syms-azureUpgrade kernel-rt-extraUpgrade kernel-debug-develUpgrade kernel-azure-optionalUpgrade kselftests-kmp-azureUpgrade kernel-sourceUpgrade kernel-azure-develUpgrade kernel-azureUpgrade kernel-default-vdsoUpgrade dlm-kmp-64kbUpgrade kernel-64kbUpgrade dtb-sprdUpgrade kernel-zfcpdumpUpgrade dtb-amazonUpgrade kernel-source-vanillaUpgrade kernel-default-manUpgrade kernel-default-devel | Dec 5, 2025 | Sep 10, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oem-22.04bUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-generic-64kUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-nvidia-64kUpgrade linux-image-awsUpgrade linux-image-oracle-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-oem-24.04aUpgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-ibmUpgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1020-awsUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-ibm-classicUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-oem-24.04Upgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-50-genericUpgrade linux-image-azureUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1020-azureUpgrade linux-image-gkeopUpgrade linux-image-oracleUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-gkeUpgrade linux-image-genericUpgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-6.8 | Dec 13, 2024 | Aug 17, 2024 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub