Public bug reported: == Created by <[email protected]> - 2026-07-06 09:40:45 == Several qemu interfaces are not hardened against broken guest usage and might result in crashes. Fix thoses.
Fixes already upstream: ------------------------ https://gitlab.com/qemu-project/qemu/-/commit/a57e4612b61da20ddab196502c76b4dc05da1de8 s390x/kvm: clamp stsi 3.2.2 size Fixes on the mailing list: -------------------------- s390x/sclp: reject invalid write event data headers s390x/pci: Tighten region detection for BAR read/write s390x/pci: Shrink RPCIT ranges to registered window s390x/ioinst: Require strict length and format for SEI CHSC handler s390x/css: limit number of CHPIDs in description https://lore.kernel.org/qemu- devel/[email protected]/T/ == Comment: #1 - <[email protected]> - 2026-07-06 09:41:22 == As soon as upstream review is finished. those fixes should be considered for all ubuntu releases in service as they allow a guest to trigger host QEMU crashes/hangs. == Comment: #2 - <[email protected]> - 2026-07-07 03:15:47 == New version of patches https://lore.kernel.org/qemu-devel/[email protected]/T/#r57123ee05c7718485f7292839448e6ec54b4b400 ** Affects: linux (Ubuntu) Importance: Undecided Assignee: Skipper Bug Screeners (skipper-screen-team) Status: New ** Tags: architecture-s39064 bugnameltc-220400 severity-high targetmilestone-inin2604 ** Tags added: architecture-s39064 bugnameltc-220400 severity-high targetmilestone-inin2604 ** Changed in: ubuntu Assignee: (unassigned) => Skipper Bug Screeners (skipper-screen-team) ** Package changed: ubuntu => linux (Ubuntu) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2160034 Title: [Ubuntu 26.04] qemu s390x: interface hardening fixes To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2160034/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
