CVE-2024-44969

s390/sclp: Prevent release of buffer in I/O

published September 4, 2024

CVSS
—
EPSS
0%
Percentile
11.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

s390/sclp: Prevent release of buffer in I/O

When a task waiting for completion of a Store Data operation is

interrupted, an attempt is made to halt this operation. If this attempt

fails due to a hardware or firmware problem, there is a chance that the

SCLP facility might store data into buffers referenced by the original

operation at a later time.

Handle this situation by not releasing the referenced data buffers if

the halt attempt fails. For current use cases, this might result in a

leak of few pages of memory in case of a rare hardware/firmware

malfunction.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00220 · 11.8th percentile
Published
2024-09-04T18:56Z
EPSS history
Timeline
  • 04 SEP 18:56Z
    s390/sclp: Prevent release of buffer in I/O
    cvelistv5