CVE-2024-43819

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.10.2

Description A null pointer dereference issue has been resolved in the Linux kernel. The issue occurs when the KVM SET USER MEMORY REGION and KVM SET USER MEMORY REGION2 ioctls are called on a ucontrol VM, which has kvm->arch.gmap set to 0. To avoid this issue, memory management should be performed in userspace using the ioctls KVM S390 UCAS MAP and KVM S390 UCAS UNMAP. The s390 specific documentation for KVM SET USER MEMORY REGION and KVM SET USER MEMORY REGION2 has also been improved.

Recommendations Upgrade to a version later than 6.10.2 to resolve the issue. As a temporary workaround, consider rejecting the KVM SET USER MEMORY REGION and KVM SET USER MEMORY REGION2 ioctls when called on a ucontrol VM. Restrict access to the vulnerable ioctls to minimize the risk of exploitation. Avoid using the ioctls KVM SET USER MEMORY REGION and KVM SET USER MEMORY REGION2 on ucontrol VMs until the issue is resolved.