Skip to content
CVE PROGRAM SOURCE RECORD7.3 High

CVE-2025-39694

s390/sclp: Fix SCCB present check

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: s390/sclp: Fix SCCB present check Tracing code called by the SCLP interrupt handler contains early exits if the SCCB address associated with an interrupt is NULL. This check is performed after physical to virtual address translation. If the kernel identity mapping does not start at address zero, the resulting virtual address is never zero, so that the NULL checks won't work. Subsequently this may result in incorrect accesses to the first page of the identity mapping. Fix this by introducing a function that handles the NULL case before address translation.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • ada1da31ce34248bc97ca8f801f2cf6efa378a81 to < aa5073ac1a2a274812f3b04c278992e68ff67cc7affected
  • ada1da31ce34248bc97ca8f801f2cf6efa378a81 to < 86c2825791c3836a8f77a954b9c5ebe6fab410c5affected
  • ada1da31ce34248bc97ca8f801f2cf6efa378a81 to < 61605c847599fbfdfafe638607841c7d73719081affected
  • ada1da31ce34248bc97ca8f801f2cf6efa378a81 to < bf83ae3537359af088d6577812ed93113dfbcb7baffected
  • ada1da31ce34248bc97ca8f801f2cf6efa378a81 to < 430fa71027b6ac9bb0ce5532b8d0676777d4219aaffected

Linux Linux

Default version status: affected

  • 5.16affected
  • 0 to < 5.16unaffected
  • 6.1.149 to ≤ 6.1.*unaffected
  • 6.6.103 to ≤ 6.6.*unaffected
  • 6.12.44 to ≤ 6.12.*unaffected
  • 6.16.4 to ≤ 6.16.*unaffected
  • 6.17 to ≤ *unaffected

References