CyberRota Analysis
AI-GeneratedThe vulnerability affects the Linux kernel's vfio_ap subsystem, specifically in the handling of control domain removal within the vfio_ap_config_remove function. An improper use of the bitmap_andnot function can prevent the removal of explicitly unplugged control domains from KVM guests, potentially leading to resource management issues and security risks. Organizations utilizing Linux systems with KVM virtualization should prioritize addressing this vulnerability to ensure proper management of control domains and maintain system integrity.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: s390/vfio-ap: Fix control domain removal in vfio_ap_mdev_cfg_remove The vfio_ap_config_remove function uses the bitmap_andnot function to clear bits from the matrix_mdev->matrix.adm bitmap (specifies the control domains assigned to the mdev). This prevents the explicitly unplugged control domains from being removed the KVM guest. The bitmap_and function is used instead.