Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2024-42099

s390/dasd: Fix invalid dereferencing of indirect CCW data pointer

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: s390/dasd: Fix invalid dereferencing of indirect CCW data pointer Fix invalid dereferencing of indirect CCW data pointer in dasd_eckd_dump_sense() that leads to a kernel panic in error cases. When using indirect addressing for DASD CCWs (IDAW) the CCW CDA pointer does not contain the data address itself but a pointer to the IDAL. This needs to be translated from physical to virtual as well before using it. This dereferencing is also used for dasd_page_cache and also fixed although it is very unlikely that this code path ever gets used.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • c0bd39601c13ab08e961d77a90dfeeff56056353 to < c116475f7d6410b1e6d399207ac75de6cf9c3652affected
  • c0bd39601c13ab08e961d77a90dfeeff56056353 to < b3a58f3b90f564f42a5c35778d8c5107b2c2150baffected

Linux Linux

Default version status: affected

  • 6.9affected
  • 0 to < 6.9unaffected
  • 6.9.9 to ≤ 6.9.*unaffected
  • 6.10 to ≤ *unaffected

References