In the Linux kernel, the following vulnerability has been resolved:
Drivers: hv: vmbus: Don't free ring buffers that couldn't be re-encrypted
In CoCo VMs it is possible for the untrusted host to cause set_memory_encrypted() or set_memory_decrypted() to fail such that an error is returned and the resulting memory is shared. Callers need to take care to handle these errors to avoid returning decrypted (shared) memory to the page allocator, which could lead to functional or security issues.
The VMBus ring buffer code could free decrypted/shared pages if set_memory_decrypted() fails. Check the decrypted field in the struct vmbus_gpadl for the ring buffers to decide whether to free the memory.
CVSS Details
- CVSS 3.1 Base Score: 9.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-livepatch-6.1.91-99.172Upgrade kernel-modules-extra-commonUpgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-libbpf-staticUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpfUpgrade kernel-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-headersUpgrade kernel-develUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade perfUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade python3-perfUpgrade kernelUpgrade kernel-libbpf-devel | Jun 11, 2025 | May 30, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 30, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 30, 2024 |
| Suse | — | Upgrade kselftests-kmp-azureUpgrade dtb-socionextUpgrade ocfs2-kmp-azureUpgrade kernel-rt_debugUpgrade kernel-source-rtUpgrade kernel-azure-vdsoUpgrade reiserfs-kmp-rtUpgrade kernel-syms-rtUpgrade dlm-kmp-defaultUpgrade kernel-rt_debug-develUpgrade kernel-64kb-develUpgrade dtb-hisiliconUpgrade kernel-debugUpgrade dlm-kmp-azureUpgrade dtb-broadcomUpgrade gfs2-kmp-64kbUpgrade kernel-64kbUpgrade kernel-rt-optionalUpgrade dlm-kmp-rtUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade dtb-amdUpgrade kernel-debug-livepatch-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-docsUpgrade kernel-rt_debug-vdsoUpgrade dtb-marvellUpgrade kernel-azure-extraUpgrade kernel-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-extraUpgrade kernel-64kb-livepatch-develUpgrade dtb-sprdUpgrade kernel-debug-develUpgrade kernel-symsUpgrade dtb-appleUpgrade kernel-default-develUpgrade cluster-md-kmp-64kbUpgrade kernel-64kb-optionalUpgrade dtb-amazonUpgrade dtb-renesasUpgrade ocfs2-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade kernel-rt-livepatch-develUpgrade dtb-allwinnerUpgrade kernel-docs-htmlUpgrade gfs2-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-default-livepatchUpgrade kernel-kvmsmall-vdsoUpgrade dtb-freescaleUpgrade kernel-default-extraUpgrade kernel-azureUpgrade kernel-debug-vdsoUpgrade dtb-caviumUpgrade kernel-azure-livepatch-develUpgrade kernel-obs-qaUpgrade kernel-kvmsmallUpgrade dtb-alteraUpgrade kernel-devel-rtUpgrade dtb-exynosUpgrade dtb-apmUpgrade reiserfs-kmp-azureUpgrade kernel-rt-develUpgrade dtb-amlogicUpgrade dtb-rockchipUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-64kbUpgrade kernel-rt-extraUpgrade kernel-develUpgrade kernel-default-base-rebuildUpgrade kernel-azure-optionalUpgrade kernel-devel-azureUpgrade kernel-rtUpgrade gfs2-kmp-rtUpgrade dtb-xilinxUpgrade dlm-kmp-64kbUpgrade dtb-mediatekUpgrade ocfs2-kmp-defaultUpgrade dtb-armUpgrade cluster-md-kmp-azureUpgrade kernel-rt-vdsoUpgrade kernel-rt-livepatchUpgrade kernel-macrosUpgrade dtb-lgUpgrade gfs2-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-default-optionalUpgrade kernel-syms-azureUpgrade kernel-azure-develUpgrade kernel-source-azureUpgrade kernel-sourceUpgrade kernel-kvmsmall-develUpgrade kernel-default-vdsoUpgrade dtb-qcomUpgrade kernel-source-vanillaUpgrade kernel-obs-buildUpgrade dtb-nvidia | Aug 8, 2024 | May 30, 2024 |
| Ubuntu | — | Upgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-lowlatencyUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-azure-fdeUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-azureUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-generic-64kUpgrade linux-image-genericUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-oracleUpgrade linux-image-oem-24.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-virtualUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-awsUpgrade linux-image-oem-24.04aUpgrade linux-image-gcpUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-gkeUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-virtual-hwe-24.04 | Aug 9, 2024 | May 30, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | May 30, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub