Public bug reported:

== Created by <[email protected]> - 2026-07-06 09:40:45 ==
Several qemu interfaces are not hardened against broken guest usage and might 
result in crashes. 
Fix thoses.

Fixes already upstream:
------------------------
https://gitlab.com/qemu-project/qemu/-/commit/a57e4612b61da20ddab196502c76b4dc05da1de8
s390x/kvm: clamp stsi 3.2.2 size


Fixes on the mailing list:
--------------------------
s390x/sclp: reject invalid write event data headers
s390x/pci: Tighten region detection for BAR read/write
s390x/pci: Shrink RPCIT ranges to registered window
s390x/ioinst: Require strict length and format for SEI CHSC handler
s390x/css: limit number of CHPIDs in description

https://lore.kernel.org/qemu-
devel/[email protected]/T/

== Comment: #1 - <[email protected]> - 2026-07-06 09:41:22 ==
As soon as upstream review is finished. those fixes should be considered for 
all ubuntu releases in service as they allow a guest to trigger host QEMU 
crashes/hangs.

== Comment: #2 - <[email protected]> - 2026-07-07 03:15:47 ==
New version of patches
https://lore.kernel.org/qemu-devel/[email protected]/T/#r57123ee05c7718485f7292839448e6ec54b4b400

** Affects: linux (Ubuntu)
     Importance: Undecided
     Assignee: Skipper Bug Screeners (skipper-screen-team)
         Status: New


** Tags: architecture-s39064 bugnameltc-220400 severity-high 
targetmilestone-inin2604

** Tags added: architecture-s39064 bugnameltc-220400 severity-high
targetmilestone-inin2604

** Changed in: ubuntu
     Assignee: (unassigned) => Skipper Bug Screeners (skipper-screen-team)

** Package changed: ubuntu => linux (Ubuntu)

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2160034

Title:
  [Ubuntu 26.04] qemu s390x: interface hardening fixes

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/linux/+bug/2160034/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to