s390/cmf: Fix virtual vs physical address confusion
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 6.12.112, 6.18.55, 7.2.9
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
In the Linux kernel, the following vulnerability has been resolved: s390/cmf: Fix virtual vs physical address confusion The measurement block address is an absolute address. Define the associated schib_config and schib fields as dma64_t to enable automatic detection of incorrect assignments. Also add the missing virt_to_dma64() translation. Without this fix, a wrong address will be used by firmware when storing extended format channel measurement data on kernels built with CONFIG_RANDOMIZE_IDENTITY_BASE=y.
Timeline
- CVE published
- Record last updated
Affected versions
- Linux Linux
From 14edd0d73bfef320fd5be11495687ba537aa6341 · fixed in b11f369be31ea11c746833e4d3ad51dcd6b5fa2b; From 14edd0d73bfef320fd5be11495687ba537aa6341 · fixed in 748ec2f7f5df9b4fc742546a8bfc8aa5d847353e; From 14edd0d73bfef320fd5be11495687ba537aa6341 · fixed in 7f78226eb743b362f52b212d7763801642539d1c; From 14edd0d73bfef320fd5be11495687ba537aa6341 · fixed in f4d04425e66af2ecee9d1a49ae0484436f3c2fd1
- Linux Linux
6.9
- KernelLinux
From 6.9.0 · fixed in 6.12.112; From 6.13.0 · fixed in 6.18.55; From 6.19.0 · fixed in 7.2.9