Description
In the Linux kernel, the following vulnerability has been resolved: powerpc/pseries: Fix scv instruction crash with kexec kexec on pseries disables AIL (reloc_on_exc), required for scv instruction support, before other CPUs have been shut down. This means they can execute scv instructions after AIL is disabled, which causes an interrupt at an unexpected entry location that crashes the kernel. Change the kexec sequence to disable AIL after other CPUs have been brought down. As a refresher, the real-mode scv interrupt vector is 0x17000, and the fixed-location head code probably couldn't easily deal with implementing such high addresses so it was just decided not to support that interrupt at all.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
7fa95f9adaee7e5cbb195d3359741120829e488b to < c550679d604798d9fed8a5b2bb5693448a25407caffected7fa95f9adaee7e5cbb195d3359741120829e488b to < d10e3c39001e9194b9a1bfd6979bd3fa19dccdc5affected7fa95f9adaee7e5cbb195d3359741120829e488b to < 8c6506616386ce37e59b2745fc481c6713fae4f3affected7fa95f9adaee7e5cbb195d3359741120829e488b to < 21a741eb75f80397e5f7d3739e24d7d75e619011affected
Linux Linux
Default version status: affected
5.9affected0 to < 5.9unaffected6.1.98 to ≤ 6.1.*unaffected6.6.39 to ≤ 6.6.*unaffected6.9.9 to ≤ 6.9.*unaffected6.10 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/c550679d604798d9fed8a5b2bb5693448a25407c ↗
- https://git.kernel.org/stable/c/d10e3c39001e9194b9a1bfd6979bd3fa19dccdc5 ↗
- https://git.kernel.org/stable/c/8c6506616386ce37e59b2745fc481c6713fae4f3 ↗
- https://git.kernel.org/stable/c/21a741eb75f80397e5f7d3739e24d7d75e619011 ↗
- https://lists.debian.org/debian-lts-announce/2025/01/msg00001.html ↗