Description
In the Linux kernel, the following vulnerability has been resolved: KVM: s390/diag: fix racy access of physical cpu number in diag 9c handler We do check for target CPU == -1, but this might change at the time we are going to use it. Hold the physical target CPU in a local variable to avoid out-of-bound accesses to the cpu arrays.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
87e28a15c42cc592009c32a8c20e5789059027c2 to < a9ccf140a2a03a0ae82be4bdfbdd17bdaea72ff5affected87e28a15c42cc592009c32a8c20e5789059027c2 to < 86bfb18bad60fc468e5f112cbbd918462a8dd435affected87e28a15c42cc592009c32a8c20e5789059027c2 to < dc7e0192c470a53d847c79a2796f9ac429477a26affected87e28a15c42cc592009c32a8c20e5789059027c2 to < 0bc380beb78aa352eadbc21d934dd9606fcee808affected
Linux Linux
Default version status: affected
5.13affected0 to < 5.13unaffected5.15.121 to ≤ 5.15.*unaffected6.1.39 to ≤ 6.1.*unaffected6.4.4 to ≤ 6.4.*unaffected6.5 to ≤ *unaffected