In the Linux kernel, the following vulnerability has been resolved:
dma-direct: Leak pages on dma_set_decrypted() failure
On TDX it is possible for the untrusted host to cause set_memory_encrypted() or set_memory_decrypted() to fail such that an error is returned and the resulting memory is shared. Callers need to take care to handle these errors to avoid returning decrypted (shared) memory to the page allocator, which could lead to functional or security issues.
DMA could free decrypted/shared pages if dma_set_decrypted() fails. This should be a rare case. Just leak the pages in this case instead of freeing them.
CVSS Details
- CVSS 3.1 Base Score: 9.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debugUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-develUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdumpUpgrade kernel-modules-extraUpgrade kernel-toolsUpgrade kernel-rtUpgrade kernel-coreUpgrade kernel-rt-modulesUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-headersUpgrade kernel-docUpgrade kernel-debug-coreUpgrade kernel-rt-debugUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade perfUpgrade kernel-debug-modulesUpgrade kernel-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-develUpgrade bpftoolUpgrade kernel-tools-libs-develUpgrade kernel-rt-coreUpgrade kernelUpgrade kernel-cross-headersUpgrade kernel-rt-modules-extraUpgrade kernel-develUpgrade python3-perf | Nov 7, 2024 | May 19, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 19, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernelUpgrade bpftoolUpgrade kernel-toolsUpgrade python3-perf | Oct 8, 2024 | May 19, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-libs | Oct 9, 2024 | May 19, 2024 |
| Oracle_linux | — | Upgrade kernel | Nov 11, 2024 | May 19, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Nov 6, 2024 | May 19, 2024 |
| Rocky_linux | — | Upgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-tools-libs-develUpgrade perf-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-debug-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-rtUpgrade python3-perf-debuginfoUpgrade python3-perfUpgrade kernel-debug-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-modules-extraUpgrade kernelUpgrade kernel-rt-debugUpgrade kernel-debug-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-coreUpgrade bpftoolUpgrade kernel-rt-develUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-debugUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-rt-debug-coreUpgrade kernel-cross-headersUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-coreUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-modulesUpgrade kernel-rt-debuginfo-common-x86_64 | Nov 19, 2024 | May 19, 2024 |
| Suse | — | Upgrade reiserfs-kmp-rtUpgrade dtb-appleUpgrade kernel-source-rtUpgrade kernel-rt-extraUpgrade kernel-source-vanillaUpgrade kernel-rt-optionalUpgrade ocfs2-kmp-64kbUpgrade dlm-kmp-defaultUpgrade kernel-azureUpgrade dtb-socionextUpgrade kernel-debug-livepatch-develUpgrade kernel-docs-htmlUpgrade kernel-azure-optionalUpgrade gfs2-kmp-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-lgUpgrade kernel-obs-buildUpgrade kernel-rt-livepatch-develUpgrade kernel-default-develUpgrade dlm-kmp-64kbUpgrade kernel-azure-vdsoUpgrade kernel-source-azureUpgrade dlm-kmp-rtUpgrade dtb-sprdUpgrade dtb-marvellUpgrade kernel-default-livepatchUpgrade kernel-kvmsmall-vdsoUpgrade kselftests-kmp-64kbUpgrade kernel-debug-vdsoUpgrade kernel-rt_debugUpgrade dtb-freescaleUpgrade dtb-broadcomUpgrade kernel-azure-livepatch-develUpgrade dtb-amlogicUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-azure-extraUpgrade kernel-rtUpgrade dtb-rockchipUpgrade dtb-amazonUpgrade dtb-nvidiaUpgrade kernel-devel-azureUpgrade kernel-64kb-extraUpgrade kselftests-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-syms-azureUpgrade cluster-md-kmp-64kbUpgrade kernel-azure-develUpgrade kernel-sourceUpgrade dtb-alteraUpgrade dtb-caviumUpgrade kernel-rt_debug-develUpgrade kernel-64kbUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt-vdsoUpgrade reiserfs-kmp-azureUpgrade dtb-armUpgrade ocfs2-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-macrosUpgrade dtb-renesasUpgrade kernel-obs-qaUpgrade gfs2-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-optionalUpgrade kernel-defaultUpgrade dtb-qcomUpgrade dlm-kmp-azureUpgrade dtb-hisiliconUpgrade ocfs2-kmp-defaultUpgrade dtb-apmUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kselftests-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade kernel-devel-rtUpgrade kernel-debug-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-rt-livepatchUpgrade kernel-default-extraUpgrade cluster-md-kmp-defaultUpgrade dtb-xilinxUpgrade kernel-debugUpgrade kernel-rt-develUpgrade dtb-mediatekUpgrade cluster-md-kmp-azureUpgrade kernel-docsUpgrade kernel-default-optionalUpgrade dtb-allwinnerUpgrade kernel-symsUpgrade kernel-64kb-develUpgrade kernel-kvmsmallUpgrade kernel-default-vdsoUpgrade kernel-default-baseUpgrade gfs2-kmp-rtUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-rtUpgrade dtb-exynosUpgrade kernel-develUpgrade dtb-amd | Jun 13, 2024 | May 19, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1008-oracleUpgrade linux-image-6.8.0-1006-gkeUpgrade linux-image-oem-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1008-oracle-64kUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1010-azureUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1007-intelUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-38-genericUpgrade linux-image-virtualUpgrade linux-image-ibmUpgrade linux-image-awsUpgrade linux-image-intelUpgrade linux-image-6.8.0-1008-ibmUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1011-awsUpgrade linux-image-ibm-classicUpgrade linux-image-gcpUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1008-oemUpgrade linux-image-raspiUpgrade linux-image-6.8.0-38-lowlatencyUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1009-nvidia-64kUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1010-azure-fdeUpgrade linux-image-lowlatencyUpgrade linux-image-azureUpgrade linux-image-6.8.0-1010-gcpUpgrade linux-image-6.8.0-38-lowlatency-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-38-generic-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1009-nvidiaUpgrade linux-image-6.8.0-1007-raspiUpgrade linux-image-oracleUpgrade linux-image-generic | Jul 12, 2024 | May 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | May 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub