CyberRota Analysis
AI-GeneratedThe vulnerability affects the Linux kernel's KVM (Kernel-based Virtual Machine) implementation on s390 architecture, specifically related to the handling of machine checks in the guest channel subsystem. By improperly reinjecting channel-subsystem damage machine checks into the guest, this flaw can lead to memory corruption, potentially compromising the stability and security of virtualized environments. Organizations utilizing Linux on s390 systems, particularly those running virtual machines, should prioritize addressing this issue to mitigate risks associated with memory corruption and system reliability.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: KVM: s390: Fix memory corruption by not reinjecting CK machine checks Channel-subsystem damage machine checks are for the host channel subsystem. The guest channel subsystem is emulated in the userspace VMM. There is no point in forwarding such machine checks into the guest. This also simplifies the machine check reinjection and avoids kfree of a stack variable as reported by sashiko. There might be still machine checks that have the ck bit set with another bit (like instruction damage), mask out the CK bit in s390_backup_mcck_info(), like the CP and ED bits already are.