CVE-2023-54117

A kernel crash vulnerability was found in the Linux kernel's s390 dcssblk driver. Missing dax_remove_host() calls in the device removal path, combined with broken error handling in the device add path, cause stale xarray entries and list_add corruption. When a previously used gendisk pointer is reused, the kernel crashes with list corruption during subsequent device operations.

This flaw affects IBM s390 systems using the dcssblk driver for DCSS (Discontiguous Saved Segments) block devices. The crash occurs after device add/remove cycles when the same gendisk pointer is reused. This is an s390-specific issue and does not affect other architectures.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.