Lucene search

K
vulnrichmentLinuxVULNRICHMENT:CVE-2024-42099
HistoryJul 30, 2024 - 7:45 a.m.

CVE-2024-42099 s390/dasd: Fix invalid dereferencing of indirect CCW data pointer

2024-07-3007:45:55
Linux
github.com
2
linux kernel
s390/dasd
indirect addressing
vulnerability
kernel panic
error cases

AI Score

6.7

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

In the Linux kernel, the following vulnerability has been resolved:

s390/dasd: Fix invalid dereferencing of indirect CCW data pointer

Fix invalid dereferencing of indirect CCW data pointer in
dasd_eckd_dump_sense() that leads to a kernel panic in error cases.

When using indirect addressing for DASD CCWs (IDAW) the CCW CDA pointer
does not contain the data address itself but a pointer to the IDAL.
This needs to be translated from physical to virtual as well before
using it.

This dereferencing is also used for dasd_page_cache and also fixed
although it is very unlikely that this code path ever gets used.

AI Score

6.7

Confidence

Low

SSVC

Exploitation

none

Automatable

no

Technical Impact

partial

Related for VULNRICHMENT:CVE-2024-42099