In the Linux kernel, the following vulnerability has been resolved:
kvm: s390: Reject memory region operations for ucontrol VMs
This change rejects the KVM_SET_USER_MEMORY_REGION and KVM_SET_USER_MEMORY_REGION2 ioctls when called on a ucontrol VM. This is necessary since ucontrol VMs have kvm->arch.gmap set to 0 and would thus result in a null pointer dereference further in. Memory management needs to be performed in userspace and using the ioctls KVM_S390_UCAS_MAP and KVM_S390_UCAS_UNMAP.
Also improve s390 specific documentation for KVM_SET_USER_MEMORY_REGION and KVM_SET_USER_MEMORY_REGION2.
[[email protected]: commit message spelling fix, subject prefix fix]
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 15, 2025 | Aug 17, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftool | Dec 12, 2024 | Aug 17, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade bpftool | Dec 12, 2024 | Aug 17, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Aug 17, 2024 |
| Suse | — | Upgrade gfs2-kmp-rtUpgrade ocfs2-kmp-rtUpgrade reiserfs-kmp-rtUpgrade cluster-md-kmp-64kbUpgrade kernel-kvmsmallUpgrade kernel-obs-qaUpgrade kernel-default-extraUpgrade kernel-default-livepatch-develUpgrade kernel-symsUpgrade dtb-armUpgrade dtb-mediatekUpgrade reiserfs-kmp-defaultUpgrade dtb-nvidiaUpgrade kselftests-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-rt_debug-vdsoUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-rtUpgrade dtb-xilinxUpgrade kselftests-kmp-rtUpgrade kernel-docsUpgrade kernel-default-base-rebuildUpgrade kernel-defaultUpgrade kernel-develUpgrade dtb-apmUpgrade reiserfs-kmp-azureUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-optionalUpgrade kernel-64kb-develUpgrade kernel-rt-develUpgrade kernel-debug-livepatch-develUpgrade ocfs2-kmp-azureUpgrade gfs2-kmp-64kbUpgrade dtb-qcomUpgrade dlm-kmp-defaultUpgrade kernel-rtUpgrade kernel-syms-rtUpgrade kernel-macrosUpgrade dtb-rockchipUpgrade dtb-amlogicUpgrade cluster-md-kmp-rtUpgrade dlm-kmp-azureUpgrade kernel-devel-rtUpgrade kernel-debugUpgrade kernel-rt-livepatchUpgrade kernel-azure-livepatch-develUpgrade kernel-debug-develUpgrade kselftests-kmp-azureUpgrade kernel-devel-azureUpgrade kernel-azure-optionalUpgrade kernel-azure-extraUpgrade kernel-debug-vdsoUpgrade dtb-alteraUpgrade kernel-azure-develUpgrade kernel-rt-vdsoUpgrade dtb-broadcomUpgrade kernel-64kbUpgrade kernel-kvmsmall-develUpgrade dtb-amdUpgrade kernel-default-develUpgrade ocfs2-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-default-manUpgrade kernel-azure-vdsoUpgrade dtb-socionextUpgrade dtb-marvellUpgrade dtb-freescaleUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-64kb-extraUpgrade kernel-rt-optionalUpgrade kernel-rt_debugUpgrade kernel-azure-baseUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-source-rtUpgrade kernel-source-azureUpgrade dtb-sprdUpgrade dtb-amazonUpgrade kernel-docs-htmlUpgrade kernel-default-vdsoUpgrade kernel-rt-extraUpgrade dtb-lgUpgrade kernel-syms-azureUpgrade dtb-exynosUpgrade kernel-64kb-optionalUpgrade dtb-appleUpgrade dlm-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-sourceUpgrade dtb-caviumUpgrade kernel-default-livepatchUpgrade dtb-allwinnerUpgrade kernel-rt_debug-develUpgrade gfs2-kmp-defaultUpgrade gfs2-kmp-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-obs-buildUpgrade ocfs2-kmp-defaultUpgrade dtb-renesasUpgrade dtb-hisiliconUpgrade kernel-azure | Dec 5, 2025 | Sep 10, 2024 |
| Ubuntu | — | Upgrade linux-image-kvmUpgrade linux-image-6.8.0-1020-awsUpgrade linux-image-awsUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-lowlatencyUpgrade linux-image-gkeop-6.8Upgrade linux-image-nvidiaUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-oracle-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oem-22.04aUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-ibmUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-nvidia-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-azure-fdeUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oem-22.04cUpgrade linux-image-oem-22.04bUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-gcpUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-generic-64kUpgrade linux-image-azureUpgrade linux-image-raspiUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-50-genericUpgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-genericUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-gkeopUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-6.8.0-1020-azureUpgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-oem-22.04Upgrade linux-image-oem-24.04Upgrade linux-image-gkeUpgrade linux-image-nvidia-6.8Upgrade linux-image-nvidia-hwe-22.04 | Dec 13, 2024 | Aug 17, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub