In the Linux kernel, the following vulnerability has been resolved:
x86/tdx: Fix "in-kernel MMIO" check
TDX only supports kernel-initiated MMIO operations. The handle_mmio() function checks if the #VE exception occurred in the kernel and rejects the operation if it did not.
However, userspace can deceive the kernel into performing MMIO on its behalf. For example, if userspace can point a syscall to an MMIO address, syscall does get_user() or put_user() on it, triggering MMIO #VE. The kernel will treat the #VE as in-kernel MMIO.
Ensure that the target MMIO address is within the kernel before decoding instruction.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-64k-develUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-debug-uki-virtUpgrade kernel-debug-coreUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-devel-matchedUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-rt-debug-develUpgrade kernel-debug-develUpgrade kernel-zfcpdumpUpgrade kernel-64k-modules-coreUpgrade kernel-64k-debug-modules-extraUpgrade rtlaUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-modulesUpgrade kernel-64k-coreUpgrade kernel-zfcpdump-develUpgrade python3-perfUpgrade kernel-rt-64k-debugUpgrade kernel-modules-extraUpgrade kernel-debug-modules-coreUpgrade kernel-coreUpgrade libperfUpgrade kernel-headersUpgrade kernel-uki-virtUpgrade kernel-rt-64k-modules-extraUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debugUpgrade kernel-debug-devel-matchedUpgrade kernel-modules-coreUpgrade kernel-docUpgrade perfUpgrade kernel-abi-stablelistsUpgrade kernel-debug-modules-extraUpgrade rvUpgrade kernel-tools-libsUpgrade kernel-64k-debugUpgrade kernel-64k-debug-modulesUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-modulesUpgrade kernel-rtUpgrade kernel-64k-debug-coreUpgrade kernel-rt-modulesUpgrade kernel-develUpgrade kernel-rt-64k-modulesUpgrade kernel-debug-modulesUpgrade kernel-64kUpgrade kernel-64k-modules-extraUpgrade kernel-toolsUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-64k-develUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-modules-coreUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-64k-debug-coreUpgrade kernel-rt-64kUpgrade kernel-tools-libs-develUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debugUpgrade kernel-64k-debug-develUpgrade kernel-rt-64k-debug-develUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-64k-modules-coreUpgrade kernelUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-develUpgrade kernel-64k-modulesUpgrade kernel-rt-64k-core | Nov 20, 2025 | Nov 11, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Nov 11, 2024 | Oct 21, 2024 |
| Oracle_linux | — | Upgrade kernel | Nov 28, 2025 | Oct 21, 2024 |
| Redhat_linux | — | Upgrade kernel-rtNo solution existsUpgrade kernel | Jul 9, 2025 | Oct 21, 2024 |
| Rocky_linux | — | Upgrade kernel-debug-modulesUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debugUpgrade kernel-debug-uki-virtUpgrade kernel-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-tools-libsUpgrade kernel-uki-virtUpgrade kernel-modulesUpgrade kernel-debug-debuginfoUpgrade kernel-debuginfoUpgrade kernel-rt-coreUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debugUpgrade kernel-debug-modules-coreUpgrade kernel-develUpgrade kernel-debug-coreUpgrade kernel-coreUpgrade kernel-rt-debuginfoUpgrade kernel-zfcpdump-develUpgrade kernel-rt-modulesUpgrade perfUpgrade libperfUpgrade python3-perf-debuginfoUpgrade kernel-rt-debug-modulesUpgrade rtlaUpgrade kernel-debug-develUpgrade kernel-rt-debug-modules-coreUpgrade perf-debuginfoUpgrade libperf-debuginfoUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-develUpgrade kernelUpgrade kernel-zfcpdump-modulesUpgrade rvUpgrade kernel-rt-modules-extraUpgrade kernel-rtUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-s390xUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-debug-devel-matchedUpgrade kernel-tools-libs-develUpgrade kernel-devel-matchedUpgrade python3-perfUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-coreUpgrade kernel-uki-virt-addonsUpgrade kernel-toolsUpgrade kernel-zfcpdump-modules-core | Feb 5, 2026 | Nov 21, 2025 |
| Ubuntu | — | Upgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1020-oracle-64kUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1020-oracleUpgrade linux-image-aws-lts-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oem-24.04bUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1024-oemUpgrade linux-image-6.8.0-54-lowlatencyUpgrade linux-image-awsUpgrade linux-image-6.8.0-1019-gkeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1022-nvidia-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1022-ibmUpgrade linux-image-nvidia-6.8Upgrade linux-image-oracleUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-6.8.0-57-generic-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-realtimeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1025-azureUpgrade linux-image-oem-24.04Upgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1022-nvidia-lowlatencyUpgrade linux-image-oem-24.04aUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-6.8.0-57-genericUpgrade linux-image-oem-22.04dUpgrade linux-image-gcp-lts-24.04Upgrade linux-image-virtualUpgrade linux-image-6.8.0-54-lowlatency-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-oem-22.04bUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-genericUpgrade linux-image-6.8.0-54-generic-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-gkeopUpgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1006-gkeopUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-oem-22.04cUpgrade linux-image-gcp-64kUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-ibm-classicUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1019-raspiUpgrade linux-image-6.8.0-1025-azure-fdeUpgrade linux-image-6.8.0-1023-awsUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-nvidiaUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1024-gcp-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-ibmUpgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-azureUpgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-oem-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1022-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1024-gcpUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-azure-fdeUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-54-genericUpgrade linux-image-6.8.0-1022-nvidiaUpgrade linux-image-nvidia-lowlatency | Feb 20, 2025 | Oct 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Oct 21, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub