Description
In the Linux kernel, the following vulnerability has been resolved:
s390/mm: Fix VM_FAULT_HWPOISON handling in do_exception()
There is no support for HWPOISON, MEMORY_FAILURE, or ARCH_HAS_COPY_MC on
s390. Therefore we do not expect to see VM_FAULT_HWPOISON in
do_exception().
However, since commit af19487f00f3 ("mm: make PTE_MARKER_SWAPIN_ERROR more
general"), it is possible to see VM_FAULT_HWPOISON in combination with
PTE_MARKER_POISONED, even on architectures that do not support HWPOISON
otherwise. In this case, we will end up on the BUG() in do_exception().
Fix this by treating VM_FAULT_HWPOISON the same as VM_FAULT_SIGBUS, similar
to x86 when MEMORY_FAILURE is not configured. Also print unexpected fault
flags, for easier debugging.
Note that VM_FAULT_HWPOISON_LARGE is not expected, because s390 cannot
support swap entries on other levels than PTE level.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Linux | Linux | 6.6 | 6.6.44 |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | linux | 6.9.12-1 | — |
| Debian 13 | linux | 6.9.12-1 | — |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 24.04 LTS | linux | 6.8.0-48.48 | USN-7089-1 |
| Ubuntu 24.04 LTS | linux-aws | 6.8.0-1018.20 | USN-7089-3 |
| Ubuntu 24.04 LTS | linux-azure | 6.8.0-1017.20 | USN-7089-2 |
| Ubuntu 24.04 LTS | linux-gcp +1 | 6.8.0-1017.19 | USN-7095-1, USN-7089-2 |
| Ubuntu 24.04 LTS | linux-gke | 6.8.0-1013.17 | USN-7089-6 |
| Ubuntu 24.04 LTS | linux-gkeop | 6.8.0-1002.4 | USN-7156-1 |
| Ubuntu 24.04 LTS | linux-ibm | 6.8.0-1015.15 | USN-7089-2 |
| Ubuntu 24.04 LTS | linux-lowlatency | 6.8.0-48.48.3 | USN-7089-7 |
| Ubuntu 24.04 LTS | linux-nvidia-lowlatency | 6.8.0-1017.19.1 | USN-7095-1 |
| Ubuntu 24.04 LTS | linux-oem-6.8 | 6.8.0-1016.16 | USN-7089-4 |
| Ubuntu 24.04 LTS | linux-oracle | 6.8.0-1015.16 | USN-7089-3 |
| Ubuntu 24.04 LTS | linux-raspi | 6.8.0-1014.16 | USN-7089-5 |
| Ubuntu 24.04 LTS | linux-riscv | 6.8.0-48.48.1 | — |
| Ubuntu 22.04 LTS | linux-aws-6.8 | 6.8.0-1018.19~22.04.1 | USN-7089-3 |
| Ubuntu 22.04 LTS | linux-azure-6.8 | 6.8.0-1017.20~22.04.1 | USN-7090-1 |
| Ubuntu 22.04 LTS | linux-gcp-6.8 +1 | 6.8.0-1017.19~22.04.1 | USN-7095-1, USN-7089-1 |
| Ubuntu 22.04 LTS | linux-hwe-6.8 | 6.8.0-48.48~22.04.1 | USN-7089-1 |
| Ubuntu 22.04 LTS | linux-lowlatency-hwe-6.8 | 6.8.0-48.48.3~22.04.1 | USN-7089-7 |
| Ubuntu 22.04 LTS | linux-oracle-6.8 | 6.8.0-1015.15~22.04.1 | USN-7089-3 |
| Ubuntu 22.04 LTS | linux-riscv +31 | No fix yet | — |
| Ubuntu 22.04 LTS | linux-riscv-6.8 | 6.8.0-48.48.1~22.04.2 | — |
| Ubuntu 20.04 LTS | linux-gke +26 | No fix yet | — |
| Ubuntu 18.04 LTS | linux-gcp +13 | No fix yet | — |
| Ubuntu 16.04 LTS | linux-hwe-edge | No fix yet | — |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro Realtime 24.04 LTS | linux-raspi-realtime | 6.8.0-2013.14 | — |
| Ubuntu Pro Realtime 24.04 LTS | linux-realtime | 6.8.1-1011.11 | — |
Advisories 11
- WID-SEC-2024-1722 Linux Kernel: Mehrere Schwachstellen ermöglichen nicht spezifizierten Angriff BSI CERT-Bund (WID) · Nov 9, 2026
- USN-7156-1 linux-gkeop vulnerabilities Ubuntu Security Notices (USN) · Oct 29, 2026
- USN-7095-1 linux-nvidia, linux-nvidia-6.8, linux-nvidia-lowlatency vulnerabilities Ubuntu Security Notices (USN) · Oct 29, 2026
- USN-7090-1 linux-azure-6.8 vulnerabilities Ubuntu Security Notices (USN) · Oct 29, 2026
- USN-7089-3 linux-aws, linux-aws-6.8, linux-oracle, linux-oracle-6.8 vulnerabilities Ubuntu Security Notices (USN) · Oct 26, 2026
- USN-7089-6 linux-gke vulnerabilities Ubuntu Security Notices (USN) · Oct 26, 2026
- USN-7089-7 linux-lowlatency, linux-lowlatency-hwe-6.8 vulnerabilities Ubuntu Security Notices (USN) · Oct 26, 2026
- USN-7089-2 linux-azure, linux-gcp, linux-ibm vulnerabilities Ubuntu Security Notices (USN) · Oct 26, 2026
- USN-7089-1 linux, linux-gcp-6.8, linux-hwe-6.8 vulnerabilities Ubuntu Security Notices (USN) · Oct 26, 2026
- USN-7089-5 linux-raspi vulnerabilities Ubuntu Security Notices (USN) · Oct 26, 2026
- USN-7089-4 linux-oem-6.8 vulnerabilities Ubuntu Security Notices (USN) · Oct 26, 2026