CVE-2024-43865: 
Linux Kernel vulnerability analysis and mitigation

CVE-2024-43865 affects the Linux kernel's floating-point unit (FPU) handling on s390 systems. The vulnerability was discovered when exception handling for the lfpc instruction within load_fpu_state() was erroneously removed during a recent rewrite of the FPU code. This vulnerability was reported on August 20, 2024, and affects the Linux kernel's s390 architecture-specific code (Kernel Git).

The vulnerability stems from missing exception handling in the load_fpu_state() function, specifically related to the lfpc instruction. When loading invalid floating point register values, this could result in an unhandled specification exception. The issue was introduced by commit 8c09871a950a which aimed to limit save and restore operations to used registers. The fix involves replacing the fpu_lfpc() call with fpu_lfpc_safe() to properly handle potential exceptions (Kernel Git).

When exploited, this vulnerability could lead to unhandled specification exceptions when invalid floating point register values are loaded, potentially affecting system stability on s390 architecture systems (Kernel Git).

The vulnerability has been patched by re-adding proper exception handling in the load_fpu_state() function. The fix involves using the fpu_lfpc_safe() function instead of fpu_lfpc() when loading floating point control registers (Kernel Git).