In the Linux kernel, the following vulnerability has been resolved:
dma-direct: Leak pages on dma_set_decrypted() failure
On TDX it is possible for the untrusted host to cause set_memory_encrypted() or set_memory_decrypted() to fail such that an error is returned and the resulting memory is shared. Callers need to take care to handle these errors to avoid returning decrypted (shared) memory to the page allocator, which could lead to functional or security issues.
DMA could free decrypted/shared pages if dma_set_decrypted() fails. This should be a rare case. Just leak the pages in this case instead of freeing them.
CVSS Details
- CVSS 3.1 Base Score: 9.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-zfcpdumpUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-rt-debugUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-tools-libsUpgrade kernel-rtUpgrade perfUpgrade kernel-toolsUpgrade kernel-coreUpgrade kernel-modulesUpgrade kernel-abi-stablelistsUpgrade kernel-modules-extraUpgrade kernel-debug-coreUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modulesUpgrade kernel-docUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-modulesUpgrade kernel-debugUpgrade kernelUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-coreUpgrade kernel-develUpgrade kernel-rt-develUpgrade bpftoolUpgrade kernel-cross-headersUpgrade kernel-rt-coreUpgrade kernel-rt-modules-extraUpgrade python3-perfUpgrade kernel-zfcpdump-core | Nov 7, 2024 | May 19, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 19, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade bpftool | Oct 8, 2024 | May 19, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade bpftoolUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-abi-stablelists | Oct 9, 2024 | May 19, 2024 |
| Oracle_linux | — | Upgrade kernel | Nov 11, 2024 | May 19, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Nov 6, 2024 | May 19, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-modulesUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-rtUpgrade kernel-tools-libs-develUpgrade kernel-debug-modulesUpgrade kernel-toolsUpgrade kernel-rt-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-kvmUpgrade kernel-modulesUpgrade kernel-debug-develUpgrade kernel-rt-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-debugUpgrade kernel-debug-coreUpgrade python3-perfUpgrade kernel-tools-debuginfoUpgrade kernel-coreUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debugUpgrade kernelUpgrade kernel-rt-develUpgrade kernel-headersUpgrade bpftoolUpgrade kernel-cross-headersUpgrade kernel-rt-kvmUpgrade kernel-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-coreUpgrade kernel-tools-libsUpgrade kernel-develUpgrade python3-perf-debuginfoUpgrade perfUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debuginfo-common-x86_64 | Nov 19, 2024 | May 19, 2024 |
| Suse | — | Upgrade reiserfs-kmp-rtUpgrade kernel-debug-vdsoUpgrade kernel-azure-extraUpgrade kernel-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-sourceUpgrade dtb-appleUpgrade kernel-devel-azureUpgrade dlm-kmp-64kbUpgrade kernel-obs-buildUpgrade kernel-kvmsmall-livepatch-develUpgrade gfs2-kmp-azureUpgrade kernel-docs-htmlUpgrade kernel-default-livepatchUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-base-rebuildUpgrade dtb-socionextUpgrade dtb-freescaleUpgrade kernel-azure-livepatch-develUpgrade kernel-debug-livepatch-develUpgrade dtb-marvellUpgrade dtb-rockchipUpgrade kselftests-kmp-64kbUpgrade dtb-sprdUpgrade kernel-azure-vdsoUpgrade kernel-syms-rtUpgrade dtb-caviumUpgrade kernel-64kb-extraUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-64kbUpgrade dlm-kmp-defaultUpgrade kernel-azureUpgrade kernel-rt_debugUpgrade dtb-nvidiaUpgrade kernel-azure-develUpgrade dtb-amazonUpgrade kernel-default-develUpgrade kernel-source-rtUpgrade cluster-md-kmp-64kbUpgrade dtb-alteraUpgrade kernel-rt-livepatch-develUpgrade kernel-source-azureUpgrade dlm-kmp-rtUpgrade kernel-rt-vdsoUpgrade dtb-amlogicUpgrade kernel-64kbUpgrade kernel-rt-extraUpgrade dtb-broadcomUpgrade gfs2-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade kernel-syms-azureUpgrade kernel-rt_debug-develUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade dtb-lgUpgrade kernel-source-vanillaUpgrade kernel-rt-optionalUpgrade kernel-obs-qaUpgrade kernel-symsUpgrade ocfs2-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-develUpgrade dtb-qcomUpgrade dtb-allwinnerUpgrade dlm-kmp-azureUpgrade kernel-default-extraUpgrade dtb-xilinxUpgrade dtb-hisiliconUpgrade kernel-rt-livepatchUpgrade gfs2-kmp-64kbUpgrade cluster-md-kmp-defaultUpgrade kernel-debug-develUpgrade reiserfs-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade kernel-devel-rtUpgrade kernel-64kb-livepatch-develUpgrade dtb-armUpgrade dtb-apmUpgrade kselftests-kmp-rtUpgrade kselftests-kmp-defaultUpgrade dtb-amdUpgrade dtb-mediatekUpgrade kernel-docsUpgrade kernel-default-livepatch-develUpgrade dtb-exynosUpgrade kernel-defaultUpgrade kernel-64kb-optionalUpgrade kernel-kvmsmallUpgrade kernel-default-vdsoUpgrade kernel-default-baseUpgrade kernel-64kb-develUpgrade gfs2-kmp-rtUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade kernel-default-optionalUpgrade reiserfs-kmp-azureUpgrade kernel-debugUpgrade kernel-rt-develUpgrade kernel-macrosUpgrade cluster-md-kmp-azureUpgrade dtb-renesas | Jun 13, 2024 | May 19, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1010-gcpUpgrade linux-image-generic-64kUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-6.8.0-1009-nvidiaUpgrade linux-image-6.8.0-1010-azure-fdeUpgrade linux-image-6.8.0-1009-nvidia-64kUpgrade linux-image-6.8.0-38-generic-64kUpgrade linux-image-azureUpgrade linux-image-6.8.0-1007-raspiUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-38-lowlatency-64kUpgrade linux-image-gkeUpgrade linux-image-nvidiaUpgrade linux-image-raspiUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1008-oemUpgrade linux-image-6.8.0-38-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-kvmUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-38-genericUpgrade linux-image-6.8.0-1008-oracle-64kUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1006-gkeUpgrade linux-image-6.8.0-1007-intelUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-ibmUpgrade linux-image-6.8.0-1010-azureUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1008-oracleUpgrade linux-image-awsUpgrade linux-image-oracle-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1011-awsUpgrade linux-image-gcpUpgrade linux-image-oem-24.04aUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1008-ibmUpgrade linux-image-virtualUpgrade linux-image-intel | Jul 12, 2024 | May 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | May 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub