Description
In the Linux kernel, the following vulnerability has been resolved: KVM: s390: vsie: fix race during shadow creation Right now it is possible to see gmap->private being zero in kvm_s390_vsie_gmap_notifier resulting in a crash. This is due to the fact that we add gmap->private == kvm after creation: static int acquire_gmap_shadow(struct kvm_vcpu *vcpu, struct vsie_page *vsie_page) { [...] gmap = gmap_shadow(vcpu->arch.gmap, asce, edat); if (IS_ERR(gmap)) return PTR_ERR(gmap); gmap->private = vcpu->kvm; Let children inherit the private field of the parent.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
a3508fbe9dc6dd3bece0c7bf889cc085a011738c to < 5df3b81a567eb565029563f26f374ae3803a1dfcaffecteda3508fbe9dc6dd3bece0c7bf889cc085a011738c to < f5572c0323cf8b4f1f0618178648a25b8fb8a380affecteda3508fbe9dc6dd3bece0c7bf889cc085a011738c to < 28bb27824f25f36e5f80229a358d66ee09244082affecteda3508fbe9dc6dd3bece0c7bf889cc085a011738c to < fe752331d4b361d43cfd0b89534b4b2176057c32affected
Linux Linux
Default version status: affected
4.8affected0 to < 4.8unaffected6.1.82 to ≤ 6.1.*unaffected6.6.22 to ≤ 6.6.*unaffected6.7.6 to ≤ 6.7.*unaffected6.8 to ≤ *unaffected