In the Linux kernel, the following vulnerability has been resolved:
kvm: s390: Reject memory region operations for ucontrol VMs
This change rejects the KVMSETUSERMEMORYREGION and KVMSETUSERMEMORYREGION2 ioctls when called on a ucontrol VM. This is necessary since ucontrol VMs have kvm->arch.gmap set to 0 and would thus result in a null pointer dereference further in. Memory management needs to be performed in userspace and using the ioctls KVMS390UCASMAP and KVMS390UCASUNMAP.
Also improve s390 specific documentation for KVMSETUSERMEMORYREGION and KVMSETUSERMEMORYREGION2.
[frankja@linux.ibm.com: commit message spelling fix, subject prefix fix]
[
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"226797284765073320052861748998432393952",
"253128491924555626831888285902249546211",
"238298132947099755932201793176273018620"
]
},
"target": {
"file": "arch/s390/kvm/kvm-s390.c"
},
"id": "CVE-2024-43819-d359d222",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@7816e58967d0e6cadce05c8540b47ed027dc2499",
"deprecated": false
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"226797284765073320052861748998432393952",
"253128491924555626831888285902249546211",
"238298132947099755932201793176273018620"
]
},
"target": {
"file": "arch/s390/kvm/kvm-s390.c"
},
"id": "CVE-2024-43819-e0113b10",
"signature_type": "Line",
"signature_version": "v1",
"source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@49c9945c054df4c22008e2bf87ca74d3e2507aa6",
"deprecated": false
}
]