Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2023-52639

KVM: s390: vsie: fix race during shadow creation

Description

In the Linux kernel, the following vulnerability has been resolved: KVM: s390: vsie: fix race during shadow creation Right now it is possible to see gmap->private being zero in kvm_s390_vsie_gmap_notifier resulting in a crash. This is due to the fact that we add gmap->private == kvm after creation: static int acquire_gmap_shadow(struct kvm_vcpu *vcpu, struct vsie_page *vsie_page) { [...] gmap = gmap_shadow(vcpu->arch.gmap, asce, edat); if (IS_ERR(gmap)) return PTR_ERR(gmap); gmap->private = vcpu->kvm; Let children inherit the private field of the parent.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • a3508fbe9dc6dd3bece0c7bf889cc085a011738c to < 5df3b81a567eb565029563f26f374ae3803a1dfcaffected
  • a3508fbe9dc6dd3bece0c7bf889cc085a011738c to < f5572c0323cf8b4f1f0618178648a25b8fb8a380affected
  • a3508fbe9dc6dd3bece0c7bf889cc085a011738c to < 28bb27824f25f36e5f80229a358d66ee09244082affected
  • a3508fbe9dc6dd3bece0c7bf889cc085a011738c to < fe752331d4b361d43cfd0b89534b4b2176057c32affected

Linux Linux

Default version status: affected

  • 4.8affected
  • 0 to < 4.8unaffected
  • 6.1.82 to ≤ 6.1.*unaffected
  • 6.6.22 to ≤ 6.6.*unaffected
  • 6.7.6 to ≤ 6.7.*unaffected
  • 6.8 to ≤ *unaffected

References