
Cloud Vulnerability DB
A community-led vulnerabilities database
In the Linux kernel, a vulnerability was discovered related to the s390/crypto implementation of ChaCha20. The issue stems from commit 349d03ffd5f6 which added a library interface to the s390-specific ChaCha20 implementation without properly checking if the required vector facilities were available before executing vector instructions (NVD).
The vulnerability occurs when the ChaCha20 implementation attempts to use vector instructions without verifying their availability on the system. When compiled into the kernel, this leads to a data exception (0007 ilc:3) if vector instructions are not available on the system. The issue specifically manifests in the chacha20vx function where vector load multiple (vlm) and vector load (vl) instructions are executed without the prerequisite MACHINEHAS_VX check (NVD).
When triggered, this vulnerability results in a kernel panic with the message "Attempted to kill init!" This can cause system crashes and potential denial of service on affected systems running the vulnerable kernel version (NVD).
The vulnerability has been resolved by adding a missing MACHINEHASVX check to verify the availability of vector instructions before their use (NVD).
Source: This report was generated using AI
Free Vulnerability Assessment
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Get a personalized demo
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
"We know that if Wiz identifies something as critical, it actually is."