In the Linux kernel, the following vulnerability has been resolved:
dma-direct: Leak pages on dma_set_decrypted() failure
On TDX it is possible for the untrusted host to cause set_memory_encrypted() or set_memory_decrypted() to fail such that an error is returned and the resulting memory is shared. Callers need to take care to handle these errors to avoid returning decrypted (shared) memory to the page allocator, which could lead to functional or security issues.
DMA could free decrypted/shared pages if dma_set_decrypted() fails. This should be a rare case. Just leak the pages in this case instead of freeing them.
CVSS Details
- CVSS 3.1 Base Score: 9.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-develUpgrade kernel-cross-headersUpgrade kernel-tools-libs-develUpgrade kernel-develUpgrade bpftoolUpgrade kernel-zfcpdump-coreUpgrade python3-perfUpgrade kernel-rt-debug-coreUpgrade kernelUpgrade kernel-rt-modules-extraUpgrade kernel-rt-coreUpgrade kernel-rtUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-develUpgrade perfUpgrade kernel-docUpgrade kernel-tools-libsUpgrade kernel-debug-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-rt-debugUpgrade kernel-zfcpdumpUpgrade kernel-modulesUpgrade kernel-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-toolsUpgrade kernel-debugUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-headersUpgrade kernel-debug-devel | Nov 7, 2024 | May 19, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 19, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs | Oct 8, 2024 | May 19, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-tools-libsUpgrade bpftoolUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools | Oct 9, 2024 | May 19, 2024 |
| Oracle_linux | — | Upgrade kernel | Nov 11, 2024 | May 19, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Nov 6, 2024 | May 19, 2024 |
| Rocky_linux | — | Upgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-rt-develUpgrade kernel-develUpgrade kernel-headersUpgrade kernel-rt-debugUpgrade kernelUpgrade kernel-debug-debuginfoUpgrade python3-perfUpgrade kernel-modules-extraUpgrade kernel-rt-debug-coreUpgrade perfUpgrade kernel-rt-coreUpgrade kernel-coreUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-modulesUpgrade kernel-rt-debug-modulesUpgrade bpftoolUpgrade kernel-rt-debug-modules-extraUpgrade kernel-tools-libsUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-develUpgrade kernel-cross-headersUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-coreUpgrade python3-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-debug-modules-extraUpgrade bpftool-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-rt-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-rt-modulesUpgrade perf-debuginfoUpgrade kernel-rt | Nov 19, 2024 | May 19, 2024 |
| Suse | — | Upgrade kernel-docs-htmlUpgrade dtb-rockchipUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-sprdUpgrade dtb-socionextUpgrade gfs2-kmp-azureUpgrade kernel-debug-livepatch-develUpgrade dtb-marvellUpgrade kernel-azure-develUpgrade kernel-azure-extraUpgrade dtb-nvidiaUpgrade kernel-devel-azureUpgrade dtb-alteraUpgrade dtb-amazonUpgrade dlm-kmp-64kbUpgrade dlm-kmp-defaultUpgrade kernel-syms-azureUpgrade kselftests-kmp-azureUpgrade kernel-source-vanillaUpgrade reiserfs-kmp-64kbUpgrade kernel-rtUpgrade kernel-rt_debug-develUpgrade kernel-rt_debug-livepatch-develUpgrade reiserfs-kmp-rtUpgrade dtb-broadcomUpgrade kernel-rt_debug-vdsoUpgrade kernel-source-azureUpgrade kernel-sourceUpgrade dtb-appleUpgrade cluster-md-kmp-64kbUpgrade kernel-azureUpgrade kernel-rt-extraUpgrade kernel-rt-vdsoUpgrade kernel-source-rtUpgrade dlm-kmp-rtUpgrade dtb-amlogicUpgrade kernel-64kbUpgrade kernel-azure-vdsoUpgrade kernel-rt-optionalUpgrade dtb-lgUpgrade kernel-64kb-extraUpgrade kernel-rt-livepatch-develUpgrade kernel-debug-vdsoUpgrade kernel-obs-buildUpgrade gfs2-kmp-defaultUpgrade kernel-azure-livepatch-develUpgrade kernel-default-develUpgrade kselftests-kmp-64kbUpgrade dtb-caviumUpgrade kernel-default-livepatchUpgrade kernel-default-base-rebuildUpgrade kernel-syms-rtUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt_debugUpgrade dtb-freescaleUpgrade ocfs2-kmp-rtUpgrade cluster-md-kmp-rtUpgrade kernel-kvmsmallUpgrade cluster-md-kmp-azureUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-rtUpgrade dtb-exynosUpgrade kernel-rt-livepatchUpgrade kernel-default-livepatch-develUpgrade kernel-default-vdsoUpgrade kernel-default-baseUpgrade kernel-defaultUpgrade kselftests-kmp-defaultUpgrade dtb-armUpgrade kernel-debug-develUpgrade kernel-64kb-livepatch-develUpgrade dtb-renesasUpgrade dtb-allwinnerUpgrade dtb-amdUpgrade kernel-zfcpdumpUpgrade dtb-apmUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-kvmsmall-develUpgrade dtb-qcomUpgrade gfs2-kmp-64kbUpgrade kernel-obs-qaUpgrade dlm-kmp-azureUpgrade kernel-symsUpgrade dtb-mediatekUpgrade reiserfs-kmp-azureUpgrade kernel-rt-develUpgrade kernel-default-optionalUpgrade kernel-develUpgrade kernel-devel-rtUpgrade kernel-macrosUpgrade ocfs2-kmp-azureUpgrade kernel-docsUpgrade kernel-debugUpgrade kernel-default-extraUpgrade dtb-xilinxUpgrade dtb-hisiliconUpgrade kernel-64kb-optionalUpgrade kernel-64kb-devel | Jun 13, 2024 | May 19, 2024 |
| Ubuntu | — | Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1008-oracle-64kUpgrade linux-image-6.8.0-1008-ibmUpgrade linux-image-6.8.0-1007-intelUpgrade linux-image-intelUpgrade linux-image-ibmUpgrade linux-image-azure-fdeUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-38-genericUpgrade linux-image-6.8.0-1006-gkeUpgrade linux-image-kvmUpgrade linux-image-oem-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-virtualUpgrade linux-image-oracle-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1008-oracleUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1011-awsUpgrade linux-image-awsUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1010-azureUpgrade linux-image-oracleUpgrade linux-image-raspiUpgrade linux-image-nvidiaUpgrade linux-image-generic-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-38-lowlatency-64kUpgrade linux-image-azureUpgrade linux-image-6.8.0-1010-azure-fdeUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1010-gcpUpgrade linux-image-6.8.0-38-lowlatencyUpgrade linux-image-6.8.0-1008-oemUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1007-raspiUpgrade linux-image-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1009-nvidiaUpgrade linux-image-6.8.0-38-generic-64kUpgrade linux-image-6.8.0-1009-nvidia-64k | Jul 12, 2024 | May 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | May 19, 2024 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub