Bugzilla – Bug 1170030
VUL-0: CVE-2020-11884: kernel-source: s390/mm: fix page table upgrade vs 2ndary address mode accesses
Last modified: 2024-06-25 14:44:36 UTC
CVE-2020-11884 It was discovered that the Linux kernel for s390 systems did not properly perform page table upgrades for kernel sections that use secondary address mode. A local attacker could use this to cause a denial of service (system crash) or execute arbitrary code. References: https://nvd.nist.gov/nvd.cfm?cvename=CVE-2020-11884 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11884 https://lists.debian.org/debian-security-announce/2020/msg00071.html https://people.canonical.com/~ubuntu-security/cve/2020/CVE-2020-11884.html
(In reply to Wolfgang Frisch from comment #9) > References: > https://nvd.nist.gov/nvd.cfm?cvename=CVE-2020-11884 CVE ID Not Found > https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-11884 ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided. > https://lists.debian.org/debian-security-announce/2020/msg00071.html > https://people.canonical.com/~ubuntu-security/cve/2020/CVE-2020-11884.html OK, these two are public. I've pushed the fix through my SLE15-SP2/for-next branch. Thanks!
Please reassign completed bugs to security-team@suse.de
------- Comment From tstaudt@de.ibm.com 2020-05-11 11:02 EDT------- Hello SUSE, should this be fixed with the following entry " Tue Apr 28 16:57:56 CEST 2020 - ptesarik@suse.cz - s390/mm: fix page table upgrade vs 2ndary address mode accesses (bsc#1170030 CVE-2020-11884). - commit 0b0d8cd " in SLES 15 SP2 Snapshot15? Thanks.
(In reply to LTC BugProxy from comment #14) > ------- Comment From tstaudt@de.ibm.com 2020-05-11 11:02 EDT------- > Hello SUSE, > > should this be fixed with the following entry > " > Tue Apr 28 16:57:56 CEST 2020 - ptesarik@suse.cz > > - s390/mm: fix page table upgrade vs 2ndary address mode accesses > (bsc#1170030 CVE-2020-11884). > - commit 0b0d8cd > " > in SLES 15 SP2 Snapshot15? Yes, that's the patch from this bug.
considering it fixed
Verified by IBM.