Description
In the Linux kernel, the following vulnerability has been resolved: s390/vfio_ccw: Ensure index for read/write regions are within range The introduction of the capability chain rightly clamped the region indexes to the range of the capabilities itself, but neglected to do so for the existing read/write regions which should also be enforced.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
db8e5d17ac03a65e2e0ee0ba50bf61a99741d871 to < 3acbedf5c0b8e0971f0de423c05cc02bbf6ddb99affecteddb8e5d17ac03a65e2e0ee0ba50bf61a99741d871 to < d3b1e38404b22df5a1f93019f2bb656feaad5ae3affecteddb8e5d17ac03a65e2e0ee0ba50bf61a99741d871 to < 79ea5e0c4c8a9842ae85f45062d947b3297dfc07affecteddb8e5d17ac03a65e2e0ee0ba50bf61a99741d871 to < d597fa1273802941c7801202135976fecc29672baffecteddb8e5d17ac03a65e2e0ee0ba50bf61a99741d871 to < 649badf3a2fd8929e40198603a2cb21b74c21700affecteddb8e5d17ac03a65e2e0ee0ba50bf61a99741d871 to < 988d9b5be3c2c4baf9457ce8e11b477e13eb9fcfaffecteddb8e5d17ac03a65e2e0ee0ba50bf61a99741d871 to < 9f5f9a78fedc45bc29d6a0a64e3a3472361afae5affected
Linux Linux
Default version status: affected
5.2affected0 to < 5.2unaffected5.15.218 to ≤ 5.15.*unaffected6.1.184 to ≤ 6.1.*unaffected6.6.153 to ≤ 6.6.*unaffected6.12.105 to ≤ 6.12.*unaffected6.18.46 to ≤ 6.18.*unaffected7.1.10 to ≤ 7.1.*unaffected7.2 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/3acbedf5c0b8e0971f0de423c05cc02bbf6ddb99 ↗
- https://git.kernel.org/stable/c/d3b1e38404b22df5a1f93019f2bb656feaad5ae3 ↗
- https://git.kernel.org/stable/c/79ea5e0c4c8a9842ae85f45062d947b3297dfc07 ↗
- https://git.kernel.org/stable/c/d597fa1273802941c7801202135976fecc29672b ↗
- https://git.kernel.org/stable/c/649badf3a2fd8929e40198603a2cb21b74c21700 ↗
- https://git.kernel.org/stable/c/988d9b5be3c2c4baf9457ce8e11b477e13eb9fcf ↗
- https://git.kernel.org/stable/c/9f5f9a78fedc45bc29d6a0a64e3a3472361afae5 ↗