References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

Change History

https://git.kernel.org/stable/c/b3a58f3b90f564f42a5c35778d8c5107b2c2150b

https://git.kernel.org/stable/c/c116475f7d6410b1e6d399207ac75de6cf9c3652

In the Linux kernel, the following vulnerability has been resolved:

s390/dasd: Fix invalid dereferencing of indirect CCW data pointer

Fix invalid dereferencing of indirect CCW data pointer in
dasd_eckd_dump_sense() that leads to a kernel panic in error cases.

When using indirect addressing for DASD CCWs (IDAW) the CCW CDA pointer
does not contain the data address itself but a pointer to the IDAL.
This needs to be translated from physical to virtual as well before
using it.

This dereferencing

kernel.org https://git.kernel.org/stable/c/b3a58f3b90f564f42a5c35778d8c5107b2c2150b [No types assigned]

kernel.org https://git.kernel.org/stable/c/c116475f7d6410b1e6d399207ac75de6cf9c3652 [No types assigned]