In the Linux kernel, the following vulnerability has been resolved:
dma-direct: Leak pages on dma_set_decrypted() failure
On TDX it is possible for the untrusted host to cause set_memory_encrypted() or set_memory_decrypted() to fail such that an error is returned and the resulting memory is shared. Callers need to take care to handle these errors to avoid returning decrypted (shared) memory to the page allocator, which could lead to functional or security issues.
DMA could free decrypted/shared pages if dma_set_decrypted() fails. This should be a rare case. Just leak the pages in this case instead of freeing them.
CVSS Details
- CVSS 3.1 Base Score: 9.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-debug-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdump-develUpgrade kernel-rtUpgrade kernel-rt-debugUpgrade kernel-debug-modules-extraUpgrade kernel-debug-develUpgrade kernel-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdumpUpgrade kernel-docUpgrade kernel-headersUpgrade kernel-zfcpdump-modulesUpgrade kernel-tools-libsUpgrade kernel-debug-modulesUpgrade kernel-coreUpgrade perfUpgrade kernel-modulesUpgrade kernel-rt-modulesUpgrade kernel-toolsUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-coreUpgrade kernel-debugUpgrade kernel-rt-coreUpgrade kernel-rt-debug-coreUpgrade kernelUpgrade kernel-rt-develUpgrade kernel-rt-modules-extraUpgrade bpftoolUpgrade kernel-tools-libs-develUpgrade python3-perfUpgrade kernel-zfcpdump-coreUpgrade kernel-cross-headersUpgrade kernel-devel | Nov 7, 2024 | May 19, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 19, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools | Oct 8, 2024 | May 19, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-libs | Oct 9, 2024 | May 19, 2024 |
| Oracle_linux | — | Upgrade kernel | Nov 11, 2024 | May 19, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Nov 6, 2024 | May 19, 2024 |
| Rocky_linux | — | Upgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade kernel-rt-debug-kvmUpgrade python3-perf-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-cross-headersUpgrade kernel-rt-debug-develUpgrade kernel-debug-coreUpgrade kernel-rt-debug-coreUpgrade perfUpgrade python3-perfUpgrade kernel-rt-debug-modules-extraUpgrade kernel-tools-libsUpgrade kernel-modulesUpgrade kernel-modules-extraUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-modulesUpgrade kernel-rt-debugUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-rt-develUpgrade bpftoolUpgrade kernelUpgrade kernel-develUpgrade kernel-rt-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-coreUpgrade kernel-debug-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-rt-modulesUpgrade perf-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-tools-libs-develUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-modules-extraUpgrade kernel-rt-debuginfoUpgrade kernel-rtUpgrade kernel-rt-modules-extra | Nov 19, 2024 | May 19, 2024 |
| Suse | — | Upgrade kernel-defaultUpgrade dlm-kmp-azureUpgrade dtb-exynosUpgrade ocfs2-kmp-defaultUpgrade kernel-develUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-azureUpgrade dtb-amdUpgrade gfs2-kmp-64kbUpgrade dtb-qcomUpgrade cluster-md-kmp-azureUpgrade dtb-mediatekUpgrade reiserfs-kmp-azureUpgrade kernel-docsUpgrade kernel-rt-develUpgrade cluster-md-kmp-defaultUpgrade dtb-renesasUpgrade kernel-rt-livepatchUpgrade kernel-debugUpgrade dtb-hisiliconUpgrade dtb-xilinxUpgrade kernel-default-extraUpgrade kernel-default-optionalUpgrade kselftests-kmp-defaultUpgrade kselftests-kmp-rtUpgrade kernel-devel-rtUpgrade reiserfs-kmp-defaultUpgrade dtb-apmUpgrade kernel-macrosUpgrade kernel-symsUpgrade kernel-obs-qaUpgrade kernel-default-baseUpgrade dtb-armUpgrade kernel-default-livepatch-develUpgrade kernel-default-vdsoUpgrade kernel-kvmsmallUpgrade kernel-64kb-livepatch-develUpgrade cluster-md-kmp-rtUpgrade gfs2-kmp-rtUpgrade ocfs2-kmp-rtUpgrade kernel-64kb-develUpgrade dtb-allwinnerUpgrade kernel-64kb-optionalUpgrade kernel-debug-develUpgrade kernel-kvmsmall-develUpgrade dtb-rockchipUpgrade dtb-marvellUpgrade dtb-lgUpgrade kernel-rt-livepatch-develUpgrade kernel-default-develUpgrade kernel-debug-vdsoUpgrade kernel-64kb-extraUpgrade dtb-sprdUpgrade dtb-amlogicUpgrade dlm-kmp-rtUpgrade kernel-source-rtUpgrade kernel-rt-vdsoUpgrade kernel-rt-extraUpgrade kernel-64kbUpgrade gfs2-kmp-azureUpgrade dlm-kmp-64kbUpgrade dtb-socionextUpgrade kernel-kvmsmall-livepatch-develUpgrade gfs2-kmp-defaultUpgrade kernel-debug-livepatch-develUpgrade kernel-obs-buildUpgrade kernel-docs-htmlUpgrade kernel-syms-rtUpgrade kernel-rt-optionalUpgrade dlm-kmp-defaultUpgrade kernel-azure-optionalUpgrade kernel-azure-vdsoUpgrade kernel-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-rt_debug-develUpgrade kernel-rtUpgrade kernel-devel-azureUpgrade kernel-azure-extraUpgrade kernel-azure-develUpgrade dtb-nvidiaUpgrade dtb-appleUpgrade dtb-amazonUpgrade dtb-alteraUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-source-vanillaUpgrade kernel-sourceUpgrade kernel-rt_debug-vdsoUpgrade dtb-freescaleUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-base-rebuildUpgrade kernel-default-livepatchUpgrade kernel-rt_debugUpgrade kernel-azure-livepatch-develUpgrade dtb-broadcomUpgrade kernel-source-azureUpgrade dtb-caviumUpgrade kselftests-kmp-64kb | Jun 13, 2024 | May 19, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1008-oracleUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-kvmUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-38-genericUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1008-ibmUpgrade linux-image-ibmUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1007-intelUpgrade linux-image-6.8.0-1010-azureUpgrade linux-image-6.8.0-1011-awsUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1008-oracle-64kUpgrade linux-image-virtualUpgrade linux-image-awsUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-gcpUpgrade linux-image-oracle-64kUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1006-gkeUpgrade linux-image-intelUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-38-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1009-nvidia-64kUpgrade linux-image-raspiUpgrade linux-image-oracleUpgrade linux-image-genericUpgrade linux-image-generic-64kUpgrade linux-image-gkeUpgrade linux-image-azureUpgrade linux-image-6.8.0-1009-nvidiaUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1010-gcpUpgrade linux-image-6.8.0-1008-oemUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-38-generic-64kUpgrade linux-image-6.8.0-38-lowlatency-64kUpgrade linux-image-lowlatencyUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1010-azure-fdeUpgrade linux-image-6.8.0-1007-raspi | Jul 12, 2024 | May 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | May 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub