CVE-2024-43819

Source
https://cve.org/CVERecord?id=CVE-2024-43819
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-43819.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-43819
Downstream
AZL (2)
BELL (1)
DEBIAN (1)
ECHO (1)
OESA (4)
ROOT (2)
SUSE (11)
UBUNTU (1)
Related
Published
2024-08-17T09:21:40Z
Modified
2026-11-01T02:33:51Z
Summary
kvm: s390: Reject memory region operations for ucontrol VMs
Details

In the Linux kernel, the following vulnerability has been resolved:

kvm: s390: Reject memory region operations for ucontrol VMs

This change rejects the KVM_SET_USER_MEMORY_REGION and KVM_SET_USER_MEMORY_REGION2 ioctls when called on a ucontrol VM. This is necessary since ucontrol VMs have kvm->arch.gmap set to 0 and would thus result in a null pointer dereference further in. Memory management needs to be performed in userspace and using the ioctls KVM_S390_UCAS_MAP and KVM_S390_UCAS_UNMAP.

Also improve s390 specific documentation for KVM_SET_USER_MEMORY_REGION and KVM_SET_USER_MEMORY_REGION2.

[frankja@linux.ibm.com: commit message spelling fix, subject prefix fix]

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/43xxx/CVE-2024-43819.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
27e0393f15fc8bc855c6a888387ff5ffd2181089
Fixed
8a1bbff443a5a22c466d11cbefca9cb361306a9b
Fixed
705a8b8cc5a44b206096abb1bfdc8bc43b3c75c7
Fixed
49c9945c054df4c22008e2bf87ca74d3e2507aa6
Fixed
7816e58967d0e6cadce05c8540b47ed027dc2499

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-43819.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
3.4.0
Fixed
6.1.191
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.160
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.10.3

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-43819.json"