The vulnerability is caused by the fact that the first IDAW in a list does not need to be on a 2K/4K boundary like all others, so it is read separately to accurately calculate the size of the buffer needed to read the full IDAL. Verify that the address found in the first IDAW is unchanged between reads to ensure a consistent set of IDAWs being worked with. If the first IDAW value were to change across reads, the kernel could compute an incorrect buffer size and read memory beyond the intended region, potentially corrupting kernel memory or causing a crash. This flaw is a weakness in the s390/vfio_ccw driver that could be exploited to trigger a denial of service or facilitate a more advanced kernel exploitation by an attacker with sufficient privileges.

Any Linux kernel build that includes the s390/vfio_ccw driver is potentially affected until the kernel is updated to include the patch that ensures the first IDAW value remains constant. No specific Linux kernel version range is provided, so all installations of the kernel with the vfio_ccw module should be treated as pending updates.

The high CVSS score of 9.3 indicates a critical severity vulnerability. The EPSS score is less than 1%, indicating a very low exploitation probability, but the risk remains high due to the severity. The vulnerability is not listed in the CISA KEV catalog. Systems using the Linux s390 vfio_ccw driver remain at high risk, especially if the driver is loaded and interfaces with external devices. Attackers would need local or privileged access to deliver the exploit, likely targeting the kernel through a direct memory corruption induced by the incorrect size calculation. Until the kernel is updated, the vulnerability poses a significant threat.