In the Linux kernel, the following vulnerability has been resolved:<\/p>\n
s390\/ipl: Fix NULL deref in dump_reipl without re-IPL parm block<\/p>\n
Unlike kdump, which passes the re-IPL parameter block through os_info,
\nthe stand-alone dump passes it through the IPL parm block address and
\nchecksum in lowcore.<\/p>\n
Some IPL types, like HMC FTP boot or QEMU direct kernel boot, might not
\nprovide an IPL parameter block. In this case reipl_type_init() selects
\nIPL_TYPE_UNKNOWN and reipl_block_actual remains NULL. Nevertheless,
\ndump_reipl_run() unconditionally dereferences it when preparing the
\nlowcore fields. This may happen to work by chance when address zero
\ncontains readable lowcore data. A zero IPL parameter block address is
\nthen stored in lowcore, causing the stand-alone dumper to enter disabled
\nwait after completing the dump.<\/p>\n
Explicitly store a zero IPL parameter block address and checksum when no
\nre-IPL parameter block is available. This does not change the behavior:
\nthe stand-alone dumper completes the dump and halts, while valid re-IPL
\nparameter blocks continue to be handled as before.<\/p>\n","protected":false},"excerpt":{"rendered":"
In the Linux kernel, the following vulnerability has been resolved:<\/p>\n
s390\/ipl: Fix NULL deref in dump_reipl without re-IPL parm block<\/p>\n
Unlike kdump, which passes the re-IPL parameter block through os_<\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-39070","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/39070","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=39070"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=39070"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=39070"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}