CyberRota Analysis
AI-GeneratedThe vulnerability affects the Linux kernel's handling of EP11 CPRBs, where an improper upper limit check for domain values can lead to unauthorized access to heap memory. This could potentially allow an attacker to exploit administrative CPRBs, compromising system integrity and confidentiality. Organizations using custom device nodes in their Linux environments should prioritize addressing this issue to mitigate potential security risks.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: s390/zcrypt: Fix wrong domain value verification with EP11 CPRBs There is a wrong upper limit check for the domain value when an EP11 CPRB is processed for sending to a crypto card. This check is only active on custom device nodes but may lead to access heap memory behind perms->adm when an administrative CPRB is sent. Add correct limit (AP_DOMAINS = 256) checking to fix this.