Riskcovery

CVE-2024-44969

s390/sclp: Prevent release of buffer in I/O

State
Published
Severity
Not scored
Published
Sep 4, 2024
Updated
May 11, 2026
Reserved
Aug 21, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

s390/sclp: Prevent release of buffer in I/O

When a task waiting for completion of a Store Data operation is interrupted, an attempt is made to halt this operation. If this attempt fails due to a hardware or firmware problem, there is a chance that the SCLP facility might store data into buffers referenced by the original operation at a later time.

Handle this situation by not releasing the referenced data buffers if the halt attempt fails. For current use cases, this might result in a leak of few pages of memory in case of a rare hardware/firmware malfunction.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 66aec647216f129b8560dba738303a8486481c53 to before 7a7e60ed23d471a07dbbe72565d2992ee8244bbeAffected
  • 66aec647216f129b8560dba738303a8486481c53 to before 1ec5ea9e25f582fd6999393e2f2c3bf56f234e05Affected
  • 66aec647216f129b8560dba738303a8486481c53 to before a3e52a4c22c846858a6875e1c280030a3849e148Affected
  • 66aec647216f129b8560dba738303a8486481c53 to before a88a49473c94ccfd8dce1e766aacf3c627278463Affected
  • 66aec647216f129b8560dba738303a8486481c53 to before 46f67233b011385d53cf14d272431755de3a7c79Affected
  • 66aec647216f129b8560dba738303a8486481c53 to before 1e8b7fb427af6b2ddd54eff66a6b428a81c96633Affected
  • 66aec647216f129b8560dba738303a8486481c53 to before 2429ea3b4330e3653b72b210a0d5f2a717359506Affected
  • 66aec647216f129b8560dba738303a8486481c53 to before bf365071ea92b9579d5a272679b74052a5643e35Affected
LinuxLinux
  • 4.17Affected
  • before 4.17Not affected
  • 4.19.320 through 4.19.*Not affected
  • 5.4.282 through 5.4.*Not affected
  • 5.10.224 through 5.10.*Not affected
  • 5.15.165 through 5.15.*Not affected
  • 6.1.105 through 6.1.*Not affected
  • 6.6.46 through 6.6.*Not affected
  • 6.10.5 through 6.10.*Not affected
  • 6.11 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.