In the Linux kernel before 6.6.7, an untrusted VMM can trigger int80 syscall handling at any given point. This is related to arch/x86/coco/tdx/tdx.c and arch/x86/mm/mem_encrypt_amd.c.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-coreUpgrade rtlaUpgrade kernel-64k-debug-modules-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-64k-modules-extraUpgrade kernel-64k-debug-coreUpgrade kernel-debug-develUpgrade kernel-modules-coreUpgrade kernelUpgrade kernel-rt-modules-extraUpgrade libperfUpgrade kernel-64k-devel-matchedUpgrade kernel-64k-debug-modulesUpgrade kernel-devel-matchedUpgrade kernel-64k-modules-coreUpgrade kernel-tools-libs-develUpgrade perfUpgrade kernel-develUpgrade kernel-cross-headersUpgrade kernel-debug-devel-matchedUpgrade python3-perfUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-modulesUpgrade bpftoolUpgrade kernel-64k-coreUpgrade kernel-rt-debugUpgrade kernel-rtUpgrade kernel-rt-debug-kvmUpgrade kernel-debugUpgrade kernel-abi-stablelistsUpgrade kernel-rt-debug-develUpgrade kernel-64k-develUpgrade kernel-rt-debug-modules-coreUpgrade kernel-toolsUpgrade kernel-debug-coreUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modules-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debug-uki-virtUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-zfcpdump-modulesUpgrade kernel-docUpgrade kernel-modules-extraUpgrade kernel-64k-debugUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-tools-libsUpgrade kernel-rt-modules-coreUpgrade kernel-coreUpgrade kernel-64kUpgrade kernel-debug-modules-extraUpgrade kernel-rt-develUpgrade kernel-modulesUpgrade kernel-headersUpgrade rvUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-64k-debug-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64k-modulesUpgrade kernel-rt-modulesUpgrade kernel-uki-virtUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump | Jun 6, 2024 | Feb 12, 2024 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-develUpgrade kernel-debuginfoUpgrade kernel-libbpf-staticUpgrade kernel-modules-extraUpgrade kernel-headersUpgrade kernelUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpfUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-6.1.72-96.166Upgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade python3-perfUpgrade python3-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-modules-extra-commonUpgrade bpftool | Feb 17, 2025 | Feb 12, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Feb 12, 2024 |
| Oracle_linux | — | Upgrade kernelUpgrade kernel-uek | Jun 6, 2024 | Feb 12, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | May 1, 2024 | Feb 12, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-debugUpgrade kernel-debug-develUpgrade kernel-tools-debuginfoUpgrade python3-perfUpgrade kernel-rt-coreUpgrade kernelUpgrade kernel-develUpgrade kernel-rt-develUpgrade kernel-cross-headersUpgrade kernel-rt-debug-kvmUpgrade kernel-debugUpgrade perfUpgrade kernel-modules-extraUpgrade kernel-debug-coreUpgrade kernel-rt-modules-extraUpgrade kernel-headersUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-coreUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-toolsUpgrade kernel-modulesUpgrade perf-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-debug-modules-extraUpgrade bpftoolUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-debug-debuginfoUpgrade kernel-coreUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-debuginfo-common-x86_64Upgrade python3-perf-debuginfoUpgrade kernel-tools-libsUpgrade kernel-rtUpgrade kernel-rt-debug-modules-extra | Jun 17, 2024 | Feb 12, 2024 |
| Suse | — | Upgrade dtb-freescaleUpgrade kernel-azure-extraUpgrade dtb-amazonUpgrade kernel-develUpgrade kernel-zfcpdumpUpgrade cluster-md-kmp-azureUpgrade kernel-rt-develUpgrade dlm-kmp-defaultUpgrade dtb-armUpgrade reiserfs-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-syms-azureUpgrade dtb-lgUpgrade kernel-debug-develUpgrade dtb-amlogicUpgrade kernel-syms-rtUpgrade kernel-obs-qaUpgrade kernel-64kb-optionalUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-rtUpgrade kernel-docsUpgrade kernel-azure-vdsoUpgrade kernel-default-optionalUpgrade dtb-xilinxUpgrade dtb-appleUpgrade kernel-64kb-livepatch-develUpgrade kernel-devel-azureUpgrade kernel-default-develUpgrade dtb-hisiliconUpgrade dlm-kmp-azureUpgrade kselftests-kmp-defaultUpgrade kernel-64kbUpgrade kernel-sourceUpgrade cluster-md-kmp-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade ocfs2-kmp-rtUpgrade dtb-renesasUpgrade dtb-mediatekUpgrade dtb-apmUpgrade kernel-devel-rtUpgrade cluster-md-kmp-rtUpgrade kernel-default-extraUpgrade kernel-rt-livepatch-develUpgrade reiserfs-kmp-azureUpgrade dtb-amdUpgrade kernel-source-azureUpgrade dtb-exynosUpgrade dtb-socionextUpgrade kernel-64kb-develUpgrade kernel-rt-livepatchUpgrade kernel-kvmsmallUpgrade kernel-macrosUpgrade kernel-symsUpgrade kernel-debugUpgrade kernel-source-rtUpgrade ocfs2-kmp-64kbUpgrade dtb-allwinnerUpgrade kernel-rt-vdsoUpgrade kernel-rt-optionalUpgrade kernel-azureUpgrade dtb-caviumUpgrade dlm-kmp-64kbUpgrade gfs2-kmp-azureUpgrade kselftests-kmp-rtUpgrade kernel-azure-optionalUpgrade kselftests-kmp-64kbUpgrade kernel-docs-htmlUpgrade dtb-sprdUpgrade ocfs2-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-rt_debug-develUpgrade ocfs2-kmp-azureUpgrade kernel-default-livepatch-develUpgrade kernel-debug-vdsoUpgrade dtb-alteraUpgrade kernel-rtUpgrade kernel-default-livepatchUpgrade dtb-rockchipUpgrade reiserfs-kmp-rtUpgrade kernel-obs-buildUpgrade kernel-rt-extraUpgrade kernel-64kb-extraUpgrade cluster-md-kmp-64kbUpgrade kernel-defaultUpgrade dtb-marvellUpgrade reiserfs-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-baseUpgrade dtb-broadcomUpgrade kernel-azure-develUpgrade dtb-qcomUpgrade dtb-nvidiaUpgrade kernel-rt_debug-livepatch-develUpgrade dlm-kmp-rtUpgrade kselftests-kmp-azureUpgrade kernel-default-vdsoUpgrade kernel-rt_debugUpgrade gfs2-kmp-defaultUpgrade kernel-default-base-rebuild | Mar 13, 2024 | Feb 12, 2024 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1133-oracleUpgrade linux-image-6.5.0-25-lowlatency-64kUpgrade linux-image-5.15.0-1038-xilinx-zynqmpUpgrade linux-image-oracleUpgrade linux-image-6.5.0-1015-awsUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-6.5.0-25-generic-64kUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1067-nvidiaUpgrade linux-image-azure-fdeUpgrade linux-image-oem-20.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1067-intel-iotgUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-6.5.0-1016-azure-fdeUpgrade linux-image-gcp-lts-22.04Upgrade linux-image-virtualUpgrade linux-image-6.5.0-25-genericUpgrade linux-image-5.15.0-1069-gkeUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-aws-hweUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-4.15.0-227-lowlatencyUpgrade linux-image-5.15.0-1070-oracleUpgrade linux-image-4.15.0-227-genericUpgrade linux-image-4.15.0-1154-kvmUpgrade linux-image-6.5.0-1018-oracle-64kUpgrade linux-image-kvmUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-azure-cvmUpgrade linux-image-6.5.0-1015-gcpUpgrade linux-image-6.5.0-1018-oracleUpgrade linux-image-aws-lts-18.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-awsUpgrade linux-image-6.5.0-25-lowlatencyUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-6.5.0-1016-azureUpgrade linux-image-6.5.0-1016-oemUpgrade linux-image-6.5.0-1011-laptopUpgrade linux-image-4.15.0-1164-gcpUpgrade linux-image-generic-64kUpgrade linux-image-intelUpgrade linux-image-intel-iotgUpgrade linux-image-6.5.0-1012-raspiUpgrade linux-image-oem-20.04bUpgrade linux-image-raspiUpgrade linux-image-5.15.0-125-generic-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-5.15.0-125-genericUpgrade linux-image-genericUpgrade linux-image-azure-lts-18.04Upgrade linux-image-oracle-64kUpgrade linux-image-5.15.0-1067-nvidia-lowlatencyUpgrade linux-image-5.15.0-1069-kvmUpgrade linux-image-laptop-23.10Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-nvidiaUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1071-gcpUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-5.15.0-1055-gkeopUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-oemUpgrade linux-image-5.15.0-1065-raspiUpgrade linux-image-5.15.0-1075-azureUpgrade linux-image-5.15.0-125-generic-lpaeUpgrade linux-image-4.15.0-1179-azureUpgrade linux-image-oem-22.04dUpgrade linux-image-gkeUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1078-azureUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-lowlatencyUpgrade linux-image-gkeopUpgrade linux-image-azureUpgrade linux-image-starfiveUpgrade linux-image-5.15.0-1065-ibmUpgrade linux-image-4.15.0-1170-awsUpgrade linux-image-6.5.0-1009-starfiveUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-20.04dUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.15.0-1072-awsUpgrade linux-image-5.15.0-125-lowlatency-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-oem-20.04cUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-125-lowlatency | Mar 7, 2024 | Feb 12, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Feb 12, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub