Voluntarily Schedule During Key Setting in s390/gmap
Summary
GSD-2022-1003664: s390/gmap: voluntarily schedule during key setting. Affects Kernel versions < 5cb13cdc180adac2ecd3c8c3d146c82549163fc3. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The s390/gmap package is a component of the Linux Kernel, which is responsible for managing the General Purpose Register (GPR) mapping on IBM System z architecture. It provides functionality for mapping virtual addresses to physical addresses and plays a crucial role in the execution of programs on this platform.
Vulnerability Detail
The vulnerability identified in s390/gmap allows for voluntary scheduling during key setting. This means that an attacker could potentially exploit this vulnerability to interrupt the key setting process and gain unauthorized access or manipulate the system's memory mappings. The impact and attack plausibility of this vulnerability have not been proven yet, but it poses a potential security risk.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
The vulnerability in s390/gmap that allows for voluntary scheduling during key setting poses a potential security risk. It is crucial to update the Linux Kernel to version v5.4.198 or a later release to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for Kernel →
FAQ
The s390/gmap package is a component of the Linux Kernel that manages the General Purpose Register (GPR) mapping on IBM System z architecture.
The impact of this vulnerability is not yet proven, but it could potentially allow an attacker to interrupt the key setting process and manipulate memory mappings.
Yes, this vulnerability has been fixed in Linux Kernel version v5.4.198 by commit 5cb13cdc180adac2ecd3c8c3d146c82549163fc3.
To fix this vulnerability, it is recommended to update the Linux Kernel to version v5.4.198 or a later release.
No specific workaround has been mentioned for this vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for Kernel.