In the Linux kernel, the following vulnerability has been resolved: s390/mm: Fix VM_FAULT_HWPOISON handling in do_exception() There is no support for HWPOISON, MEMORY_FAILURE, or ARCH_HAS_COPY_MC on s390. Therefore we do not expect to see VM_FAULT_HWPOISON in do_exception(). However, since commit af19487f00f3 ("mm: make PTE_MARKER_SWAPIN_ERROR more general"), it is possible to see VM_FAULT_HWPOISON in combination with PTE_MARKER_POISONED, even on architectures that do not support HWPOISON otherwise. In this case, we will end up on the BUG() in do_exception(). Fix this by treating VM_FAULT_HWPOISON the same as VM_FAULT_SIGBUS, similar to x86 when MEMORY_FAILURE is not configured. Also print unexpected fault flags, for easier debugging. Note that VM_FAULT_HWPOISON_LARGE is not expected, because s390 cannot support swap entries on other levels than PTE level.

Metrics

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact Low

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Affected Vendors & Products

No data.

No data.

No data.

References
Link Providers
https://git.kernel.org/stable/c/73a9260b7366d2906ec011e100319359fe2277d0 cve-icon cve-icon
https://git.kernel.org/stable/c/9e13767ccefdc4f8aa92514b592b60f6b54882ff cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/a3aefb871222a9880602d1a44a558177b4143e3b cve-icon cve-icon cve-icon
https://git.kernel.org/stable/c/df39038cd89525d465c2c8827eb64116873f141a cve-icon cve-icon cve-icon
https://lore.kernel.org/linux-cve-announce/2024072929-CVE-2024-41021-f857@gregkh/T cve-icon
https://nvd.nist.gov/vuln/detail/CVE-2024-41021 cve-icon
https://www.cve.org/CVERecord?id=CVE-2024-41021 cve-icon
History

Sun, 15 Sep 2024 18:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 11 Sep 2024 13:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Fri, 06 Sep 2024 13:45:00 +0000

Type Values Removed Values Added
Weaknesses CWE-119
CWE-388
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}

 cvssV3_1

{'score': 3.3, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L'}

Sun, 11 Aug 2024 13:00:00 +0000

Type Values Removed Values Added
References
cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2024-07-29T13:34:22.636Z

Updated: 2024-11-05T09:35:08.602Z

Reserved: 2024-07-12T12:17:45.613Z

Link: CVE-2024-41021

cve-icon Vulnrichment

Updated: 2024-08-02T04:39:56.086Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2024-07-29T14:15:03.870

Modified: 2024-08-12T13:38:29.623

Link: CVE-2024-41021

cve-icon Redhat

Severity : Low

Publid Date: 2024-07-29T00:00:00Z

Links: CVE-2024-41021 - Bugzilla