Description (CNA)
In the Linux kernel, the following vulnerability has been resolved: KVM: s390: vsie: zero stale crypto bits When shadowing crypto access bits from a format0 apcb (crycb 0 or 1), the bits 64..255 are unchanged from whatever is in the vsie page in the crycb and thus in the apcb. This gives a nested guest potential access to a device no longer available. Zero out the remaining bits.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Linux / Linux | affected 6b79de4b056e5a2febc0c61233d8f0ad7868e49c before d110b3297f11ef227098b8a82ade2d5f123b7d2f; affected 6b79de4b056e5a2febc0c61233d8f0ad7868e49c before 59d51550b5cb916bda037673a721a404b3b47a0d; affected 6b79de4b056e5a2febc0c61233d8f0ad7868e49c before f6079dca67eccb5eabef9f72437948c66dc5131f; affected 6b79de4b056e5a2febc0c61233d8f0ad7868e49c before 087c19cc60a8caa1a08e1e434c8be2caf6c27733; affected 6b79de4b056e5a2febc0c61233d8f0ad7868e49c before 7d23489f51109e3ebba5b5db8c5f0185af7b7fdf; affected 6b79de4b056e5a2febc0c61233d8f0ad7868e49c before 935eeba276012916c76243e5cbb843efd8fdb75d; affected 6b79de4b056e5a2febc0c61233d8f0ad7868e49c before d4bcd2df6d0d2af916b4fe1a533958778ea7c45b; affected 6b79de4b056e5a2febc0c61233d8f0ad7868e49c before 29b4f7bc2991313bd3e6f6fb8fdf1b173f086dd6; affected 6b79de4b056e5a2febc0c61233d8f0ad7868e49c before 34d5b5b646c91cfb9338d7a12c955a70ffb8c66b |
| Linux / Linux | affected 4.20; unaffected 0 before 4.20; unaffected 5.10.269 through 5.10.*; unaffected 5.15.220 through 5.15.*; unaffected 6.1.187 through 6.1.*; unaffected 6.6.156 through 6.6.*; unaffected 6.12.108 through 6.12.*; unaffected 6.18.49 through 6.18.*; unaffected 7.1.13 through 7.1.*; unaffected 7.2.3 through 7.2.*; unaffected 7.3 through * |
CWE
No CWE identifiers supplied.
References
- https://git.kernel.org/stable/c/d110b3297f11ef227098b8a82ade2d5f123b7d2f
- https://git.kernel.org/stable/c/59d51550b5cb916bda037673a721a404b3b47a0d
- https://git.kernel.org/stable/c/f6079dca67eccb5eabef9f72437948c66dc5131f
- https://git.kernel.org/stable/c/087c19cc60a8caa1a08e1e434c8be2caf6c27733
- https://git.kernel.org/stable/c/7d23489f51109e3ebba5b5db8c5f0185af7b7fdf
- https://git.kernel.org/stable/c/935eeba276012916c76243e5cbb843efd8fdb75d
- https://git.kernel.org/stable/c/d4bcd2df6d0d2af916b4fe1a533958778ea7c45b
- https://git.kernel.org/stable/c/29b4f7bc2991313bd3e6f6fb8fdf1b173f086dd6
- https://git.kernel.org/stable/c/34d5b5b646c91cfb9338d7a12c955a70ffb8c66b