Riskcovery

CVE-2024-43819

kvm: s390: Reject memory region operations for ucontrol VMs

State
Published
Severity
Not scored
Published
Aug 17, 2024
Updated
Oct 30, 2026
Reserved
Aug 17, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

kvm: s390: Reject memory region operations for ucontrol VMs

This change rejects the KVM_SET_USER_MEMORY_REGION and KVM_SET_USER_MEMORY_REGION2 ioctls when called on a ucontrol VM. This is necessary since ucontrol VMs have kvm->arch.gmap set to 0 and would thus result in a null pointer dereference further in. Memory management needs to be performed in userspace and using the ioctls KVM_S390_UCAS_MAP and KVM_S390_UCAS_UNMAP.

Also improve s390 specific documentation for KVM_SET_USER_MEMORY_REGION and KVM_SET_USER_MEMORY_REGION2.

[frankja@linux.ibm.com: commit message spelling fix, subject prefix fix]

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 27e0393f15fc8bc855c6a888387ff5ffd2181089 to before 8a1bbff443a5a22c466d11cbefca9cb361306a9bAffected
  • 27e0393f15fc8bc855c6a888387ff5ffd2181089 to before 705a8b8cc5a44b206096abb1bfdc8bc43b3c75c7Affected
  • 27e0393f15fc8bc855c6a888387ff5ffd2181089 to before 49c9945c054df4c22008e2bf87ca74d3e2507aa6Affected
  • 27e0393f15fc8bc855c6a888387ff5ffd2181089 to before 7816e58967d0e6cadce05c8540b47ed027dc2499Affected
LinuxLinux
  • 3.4Affected
  • before 3.4Not affected
  • 6.1.191 through 6.1.*Not affected
  • 6.6.160 through 6.6.*Not affected
  • 6.10.3 through 6.10.*Not affected
  • 6.11 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.