CVE-2022-0516

A vulnerability was found in kvm_s390_guest_sida_op in the arch/s390/kvm/kvm-s390.c function in KVM for s390 in the Linux kernel. This flaw allows a local attacker with a normal user privilege to obtain unauthorized memory write access. This flaw affects Linux kernel versions prior to 5.17-rc4.

Score

CVSS 3.1 7.8 High

Status

Modified - secalert@redhat.com

Published

2022-03-10

Last modified

2024-08-02

Weaknesses

CWE-200

Affected products

• Debian Linux (Debian)
• Fedora (Fedoraproject)
• Linux Kernel (Linux)
• H300e Firmware (Netapp)
• H300s Firmware (Netapp)
• H410c Firmware (Netapp)
• H410s Firmware (Netapp)
• H500e Firmware (Netapp)
• H500s Firmware (Netapp)
• H700e Firmware (Netapp)
• H700s Firmware (Netapp)
• Codeready Linux Builder (Redhat)
• Enterprise Linux (Redhat)
• Enterprise Linux Eus (Redhat)
• Enterprise Linux For Ibm Z Systems (Redhat)
• Enterprise Linux For Ibm Z Systems Eus (Redhat)
• Enterprise Linux For Power Little Endian (Redhat)
• Enterprise Linux For Power Little Endian Eus (Redhat)
• Enterprise Linux Server Aus (Redhat)
• Enterprise Linux Server For Power Little Endian Update Services For Sap Solutions (Redhat)
• Enterprise Linux Server Tus (Redhat)
• Enterprise Linux Server Update Services For Sap Solutions (Redhat)
• Virtualization Host (Redhat)

References

• https://bugzilla.redhat.com/show_bug.cgi?id=2050237
• https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/?id=09a93c1df3eafa43bcdfd7bf837c574911f12f55
• https://security.netapp.com/advisory/ntap-20220331-0009/
• https://www.debian.org/security/2022/dsa-5092