{"id":"DEBIAN-CVE-2024-38661","details":"In the Linux kernel, the following vulnerability has been resolved:  s390/ap: Fix crash in AP internal function modify_bitmap()  A system crash like this    Failing address: 200000cb7df6f000 TEID: 200000cb7df6f403   Fault in home space mode while using kernel ASCE.   AS:00000002d71bc007 R3:00000003fe5b8007 S:000000011a446000 P:000000015660c13d   Oops: 0038 ilc:3 [#1] PREEMPT SMP   Modules linked in: mlx5_ib ...   CPU: 8 PID: 7556 Comm: bash Not tainted 6.9.0-rc7 #8   Hardware name: IBM 3931 A01 704 (LPAR)   Krnl PSW : 0704e00180000000 0000014b75e7b606 (ap_parse_bitmap_str+0x10e/0x1f8)   R:0 T:1 IO:1 EX:1 Key:0 M:1 W:0 P:0 AS:3 CC:2 PM:0 RI:0 EA:3   Krnl GPRS: 0000000000000001 ffffffffffffffc0 0000000000000001 00000048f96b75d3   000000cb00000100 ffffffffffffffff ffffffffffffffff 000000cb7df6fce0   000000cb7df6fce0 00000000ffffffff 000000000000002b 00000048ffffffff   000003ff9b2dbc80 200000cb7df6fcd8 0000014bffffffc0 000000cb7df6fbc8   Krnl Code: 0000014b75e7b5fc: a7840047            brc     8,0000014b75e7b68a   0000014b75e7b600: 18b2                lr      %r11,%r2   #0000014b75e7b602: a7f4000a            brc     15,0000014b75e7b616   \u003e0000014b75e7b606: eb22d00000e6        laog    %r2,%r2,0(%r13)   0000014b75e7b60c: a7680001            lhi     %r6,1   0000014b75e7b610: 187b                lr      %r7,%r11   0000014b75e7b612: 84960021            brxh    %r9,%r6,0000014b75e7b654   0000014b75e7b616: 18e9                lr      %r14,%r9   Call Trace:   [\u003c0000014b75e7b606\u003e] ap_parse_bitmap_str+0x10e/0x1f8   ([\u003c0000014b75e7b5dc\u003e] ap_parse_bitmap_str+0xe4/0x1f8)   [\u003c0000014b75e7b758\u003e] apmask_store+0x68/0x140   [\u003c0000014b75679196\u003e] kernfs_fop_write_iter+0x14e/0x1e8   [\u003c0000014b75598524\u003e] vfs_write+0x1b4/0x448   [\u003c0000014b7559894c\u003e] ksys_write+0x74/0x100   [\u003c0000014b7618a440\u003e] __do_syscall+0x268/0x328   [\u003c0000014b761a3558\u003e] system_call+0x70/0x98   INFO: lockdep is turned off.   Last Breaking-Event-Address:   [\u003c0000014b75e7b636\u003e] ap_parse_bitmap_str+0x13e/0x1f8   Kernel panic - not syncing: Fatal exception: panic_on_oops  occured when /sys/bus/ap/a[pq]mask was updated with a relative mask value (like +0x10-0x12,+60,-90) with one of the numeric values exceeding INT_MAX.  The fix is simple: use unsigned long values for the internal variables. The correct checks are already in place in the function but a simple int for the internal variables was used with the possibility to overflow.","modified":"2026-09-15T09:03:09.394757843Z","published":"2024-06-25T15:15:13.630Z","upstream":["CVE-2024-38661"],"references":[{"type":"ADVISORY","url":"https://security-tracker.debian.org/tracker/CVE-2024-38661"}],"affected":[{"package":{"name":"linux","ecosystem":"Debian:12","purl":"pkg:deb/debian/linux?arch=source&distro=bookworm"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.1.94-1"}]}],"versions":["6.1.27-1","6.1.37-1","6.1.38-1","6.1.38-2","6.1.38-2~bpo11+1","6.1.38-3","6.1.38-4","6.1.38-4~bpo11+1","6.1.52-1","6.1.55-1","6.1.55-1~bpo11+1","6.1.64-1","6.1.66-1","6.1.67-1","6.1.69-1","6.1.69-1~bpo11+1","6.1.76-1","6.1.76-1~bpo11+1","6.1.82-1","6.1.85-1","6.1.90-1","6.1.90-1~bpo11+1","6.1.94-1~bpo11+1"],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2024-38661.json"}},{"package":{"name":"linux","ecosystem":"Debian:13","purl":"pkg:deb/debian/linux?arch=source&distro=trixie"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.7-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2024-38661.json"}},{"package":{"name":"linux","ecosystem":"Debian:14","purl":"pkg:deb/debian/linux?arch=source&distro=forky"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.9.7-1"}]}],"ecosystem_specific":{"urgency":"not yet assigned"},"database_specific":{"source":"https://storage.googleapis.com/osv-test-debian-osv/debian-cve-osv/DEBIAN-CVE-2024-38661.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H"}]}