Description
In the Linux kernel, the following vulnerability has been resolved: s390/boot: Avoid IPL parameter append past command line A command line may occupy all but the terminating byte of COMMAND_LINE_SIZE. In that case append_ipl_block_parm() passes a zero size to the IPL parameter conversion helpers and points the destination one byte past early_command_line. The helpers subtract one from the unsigned size and write the converted parameter outside the command line buffer. Convert the IPL parameter in the command line parsing buffer first. A parameter beginning with '=' can then replace the existing command line regardless of its length, while other parameters are appended only when space remains.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Linux Linux
Default version status: unaffected
5ecb2da660ab8eddafe059a6a8a708465db89ca2 to < af9866021a00ab9eeacf0c33ee73f3d134b4ed70affected5ecb2da660ab8eddafe059a6a8a708465db89ca2 to < 73eec5a0d55916d7e1115f5d03a7ffc06d6215cfaffected5ecb2da660ab8eddafe059a6a8a708465db89ca2 to < 8d11bfec8666f8409fac9072e9c25b691d3e30acaffected5ecb2da660ab8eddafe059a6a8a708465db89ca2 to < d76181dfabdaa720703167393704efacba343442affected
Linux Linux
Default version status: affected
5.16affected0 to < 5.16unaffected6.12.112 to ≤ 6.12.*unaffected6.18.53 to ≤ 6.18.*unaffected7.2.7 to ≤ 7.2.*unaffected7.3 to ≤ *unaffected