CyberRota Analysis
AI-GeneratedThe vulnerability affects the Linux kernel's KVM component, specifically in the handling of crypto access bits within the virtualized environment for s390 architecture. This flaw could allow a nested guest to gain unauthorized access to devices that should no longer be available, potentially leading to data exposure or compromise. Organizations utilizing Linux on s390 systems, particularly those employing virtualization, should prioritize addressing this issue to mitigate the risk of unauthorized access.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: KVM: s390: vsie: zero stale crypto bits When shadowing crypto access bits from a format0 apcb (crycb 0 or 1), the bits 64..255 are unchanged from whatever is in the vsie page in the crycb and thus in the apcb. This gives a nested guest potential access to a device no longer available. Zero out the remaining bits.