In the Linux kernel, the following vulnerability has been resolved:
dma-direct: Leak pages on dma_set_decrypted() failure
On TDX it is possible for the untrusted host to cause set_memory_encrypted() or set_memory_decrypted() to fail such that an error is returned and the resulting memory is shared. Callers need to take care to handle these errors to avoid returning decrypted (shared) memory to the page allocator, which could lead to functional or security issues.
DMA could free decrypted/shared pages if dma_set_decrypted() fails. This should be a rare case. Just leak the pages in this case instead of freeing them.
CVSS Details
- CVSS 3.1 Base Score: 9.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-cross-headersUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-develUpgrade kernel-rt-coreUpgrade python3-perfUpgrade kernel-tools-libs-develUpgrade kernelUpgrade kernel-develUpgrade kernel-rt-debug-coreUpgrade bpftoolUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-debug-coreUpgrade kernel-toolsUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modulesUpgrade kernel-docUpgrade kernel-rt-modulesUpgrade perfUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdumpUpgrade kernel-rt-debugUpgrade kernel-abi-stablelistsUpgrade kernel-modulesUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-rtUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-tools-libsUpgrade kernel-core | Nov 7, 2024 | May 19, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 19, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade python3-perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelists | Oct 8, 2024 | May 19, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel | Oct 9, 2024 | May 19, 2024 |
| Oracle_linux | — | Upgrade kernel | Nov 11, 2024 | May 19, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Nov 6, 2024 | May 19, 2024 |
| Rocky_linux | — | Upgrade kernel-debug-coreUpgrade python3-perfUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-cross-headersUpgrade kernel-develUpgrade kernel-rt-coreUpgrade kernel-tools-libsUpgrade kernel-rt-debug-develUpgrade kernel-modulesUpgrade kernel-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-rt-kvmUpgrade perfUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-rt-develUpgrade python3-perf-debuginfoUpgrade kernel-headersUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-modulesUpgrade bpftoolUpgrade kernel-rt-debugUpgrade kernel-coreUpgrade kernel-toolsUpgrade kernel-rt-modulesUpgrade kernel-debug-modulesUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-rt-debuginfoUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-rt | Nov 19, 2024 | May 19, 2024 |
| Suse | — | Upgrade dtb-mediatekUpgrade kernel-default-optionalUpgrade cluster-md-kmp-azureUpgrade kernel-docsUpgrade gfs2-kmp-rtUpgrade kernel-rt-develUpgrade reiserfs-kmp-azureUpgrade kernel-defaultUpgrade kernel-default-baseUpgrade kernel-64kb-optionalUpgrade kernel-default-livepatch-develUpgrade ocfs2-kmp-rtUpgrade cluster-md-kmp-rtUpgrade kernel-64kb-develUpgrade kernel-default-vdsoUpgrade kernel-kvmsmallUpgrade dtb-exynosUpgrade ocfs2-kmp-defaultUpgrade kernel-symsUpgrade kernel-debugUpgrade kernel-macrosUpgrade dtb-hisiliconUpgrade dtb-xilinxUpgrade kernel-obs-qaUpgrade kernel-rt-livepatchUpgrade dtb-allwinnerUpgrade dtb-qcomUpgrade gfs2-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-kvmsmall-develUpgrade dtb-renesasUpgrade kselftests-kmp-rtUpgrade dtb-armUpgrade dlm-kmp-azureUpgrade dtb-amdUpgrade kernel-64kb-livepatch-develUpgrade kernel-debug-develUpgrade kernel-default-extraUpgrade kernel-devel-rtUpgrade dtb-apmUpgrade kselftests-kmp-defaultUpgrade kernel-develUpgrade ocfs2-kmp-azureUpgrade kernel-default-livepatchUpgrade kernel-source-azureUpgrade kernel-default-base-rebuildUpgrade kselftests-kmp-azureUpgrade kernel-source-rtUpgrade kernel-rt-vdsoUpgrade kernel-rt-extraUpgrade kernel-64kbUpgrade dtb-amlogicUpgrade kernel-rt_debugUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-livepatch-develUpgrade dtb-freescaleUpgrade dtb-socionextUpgrade gfs2-kmp-azureUpgrade dlm-kmp-64kbUpgrade kernel-obs-buildUpgrade kernel-docs-htmlUpgrade kernel-debug-livepatch-develUpgrade kselftests-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-caviumUpgrade dtb-lgUpgrade kernel-default-develUpgrade kernel-debug-vdsoUpgrade dtb-sprdUpgrade dtb-rockchipUpgrade dtb-marvellUpgrade kernel-64kb-extraUpgrade kernel-rt_debug-develUpgrade kernel-rtUpgrade kernel-devel-azureUpgrade kernel-azure-develUpgrade dtb-nvidiaUpgrade dtb-appleUpgrade dtb-amazonUpgrade dtb-alteraUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-source-vanillaUpgrade kernel-sourceUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-azure-extraUpgrade kernel-syms-rtUpgrade kernel-azure-vdsoUpgrade kernel-azureUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-azure-optionalUpgrade kernel-rt-optionalUpgrade dtb-broadcomUpgrade dlm-kmp-rt | Jun 13, 2024 | May 19, 2024 |
| Ubuntu | — | Upgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-38-generic-64kUpgrade linux-image-6.8.0-1007-raspiUpgrade linux-image-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-azureUpgrade linux-image-6.8.0-1009-nvidia-64kUpgrade linux-image-6.8.0-1010-gcpUpgrade linux-image-6.8.0-1008-oemUpgrade linux-image-6.8.0-1009-nvidiaUpgrade linux-image-6.8.0-1010-azure-fdeUpgrade linux-image-gkeUpgrade linux-image-oracleUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidiaUpgrade linux-image-6.8.0-38-lowlatency-64kUpgrade linux-image-6.8.0-38-lowlatencyUpgrade linux-image-genericUpgrade linux-image-lowlatency-64kUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1011-awsUpgrade linux-image-6.8.0-1007-intelUpgrade linux-image-oem-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1006-gkeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-intelUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1008-oracle-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-awsUpgrade linux-image-6.8.0-1008-ibmUpgrade linux-image-oracle-64kUpgrade linux-image-gcpUpgrade linux-image-virtualUpgrade linux-image-nvidia-64kUpgrade linux-image-ibmUpgrade linux-image-6.8.0-38-genericUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1010-azureUpgrade linux-image-kvmUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1008-oracle | Jul 12, 2024 | May 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | May 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub