Description
In the Linux kernel, the following vulnerability has been resolved: KVM: s390: vsie: zero stale crypto bits When shadowing crypto access bits from a format0 apcb (crycb 0 or 1), the bits 64..255 are unchanged from whatever is in the vsie page in the crycb and thus in the apcb. This gives a nested guest potential access to a device no longer available. Zero out the remaining bits.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
6b79de4b056e5a2febc0c61233d8f0ad7868e49c to < d110b3297f11ef227098b8a82ade2d5f123b7d2faffected6b79de4b056e5a2febc0c61233d8f0ad7868e49c to < 59d51550b5cb916bda037673a721a404b3b47a0daffected6b79de4b056e5a2febc0c61233d8f0ad7868e49c to < f6079dca67eccb5eabef9f72437948c66dc5131faffected6b79de4b056e5a2febc0c61233d8f0ad7868e49c to < 087c19cc60a8caa1a08e1e434c8be2caf6c27733affected6b79de4b056e5a2febc0c61233d8f0ad7868e49c to < 7d23489f51109e3ebba5b5db8c5f0185af7b7fdfaffected6b79de4b056e5a2febc0c61233d8f0ad7868e49c to < 935eeba276012916c76243e5cbb843efd8fdb75daffected6b79de4b056e5a2febc0c61233d8f0ad7868e49c to < d4bcd2df6d0d2af916b4fe1a533958778ea7c45baffected6b79de4b056e5a2febc0c61233d8f0ad7868e49c to < 29b4f7bc2991313bd3e6f6fb8fdf1b173f086dd6affected6b79de4b056e5a2febc0c61233d8f0ad7868e49c to < 34d5b5b646c91cfb9338d7a12c955a70ffb8c66baffected
Linux Linux
Default version status: affected
4.20affected0 to < 4.20unaffected5.10.269 to ≤ 5.10.*unaffected5.15.220 to ≤ 5.15.*unaffected6.1.187 to ≤ 6.1.*unaffected6.6.156 to ≤ 6.6.*unaffected6.12.108 to ≤ 6.12.*unaffected6.18.49 to ≤ 6.18.*unaffected7.1.13 to ≤ 7.1.*unaffected7.2.3 to ≤ 7.2.*unaffected7.3 to ≤ *unaffected
References
- https://git.kernel.org/stable/c/d110b3297f11ef227098b8a82ade2d5f123b7d2f ↗
- https://git.kernel.org/stable/c/59d51550b5cb916bda037673a721a404b3b47a0d ↗
- https://git.kernel.org/stable/c/f6079dca67eccb5eabef9f72437948c66dc5131f ↗
- https://git.kernel.org/stable/c/087c19cc60a8caa1a08e1e434c8be2caf6c27733 ↗
- https://git.kernel.org/stable/c/7d23489f51109e3ebba5b5db8c5f0185af7b7fdf ↗
- https://git.kernel.org/stable/c/935eeba276012916c76243e5cbb843efd8fdb75d ↗
- https://git.kernel.org/stable/c/d4bcd2df6d0d2af916b4fe1a533958778ea7c45b ↗
- https://git.kernel.org/stable/c/29b4f7bc2991313bd3e6f6fb8fdf1b173f086dd6 ↗
- https://git.kernel.org/stable/c/34d5b5b646c91cfb9338d7a12c955a70ffb8c66b ↗