In the Linux kernel, the following vulnerability has been resolved:
dma-direct: Leak pages on dma_set_decrypted() failure
On TDX it is possible for the untrusted host to cause set_memory_encrypted() or set_memory_decrypted() to fail such that an error is returned and the resulting memory is shared. Callers need to take care to handle these errors to avoid returning decrypted (shared) memory to the page allocator, which could lead to functional or security issues.
DMA could free decrypted/shared pages if dma_set_decrypted() fails. This should be a rare case. Just leak the pages in this case instead of freeing them.
CVSS Details
- CVSS 3.1 Base Score: 9.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-coreUpgrade kernel-tools-libs-develUpgrade kernelUpgrade kernel-rt-modules-extraUpgrade kernel-rt-develUpgrade kernel-cross-headersUpgrade bpftoolUpgrade kernel-develUpgrade kernel-zfcpdump-coreUpgrade python3-perfUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-modulesUpgrade kernel-rtUpgrade kernel-modules-extraUpgrade kernel-debug-coreUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-coreUpgrade kernel-debugUpgrade kernel-docUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-develUpgrade perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-modulesUpgrade kernel-zfcpdumpUpgrade kernel-abi-stablelistsUpgrade kernel-rt-debugUpgrade kernel-debug-develUpgrade kernel-headers | Nov 7, 2024 | May 19, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 19, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel | Oct 8, 2024 | May 19, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel | Oct 9, 2024 | May 19, 2024 |
| Oracle_linux | — | Upgrade kernel | Nov 11, 2024 | May 19, 2024 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Nov 6, 2024 | May 19, 2024 |
| Rocky_linux | — | Upgrade kernel-cross-headersUpgrade kernel-rt-debug-develUpgrade kernel-debugUpgrade kernel-rt-debug-modules-extraUpgrade kernel-tools-libsUpgrade kernel-rt-debugUpgrade kernel-rt-coreUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-develUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernel-rt-develUpgrade bpftoolUpgrade kernelUpgrade perfUpgrade python3-perfUpgrade python3-perf-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-coreUpgrade kernel-debug-coreUpgrade kernel-rt-debug-coreUpgrade kernel-develUpgrade kernel-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-debuginfoUpgrade kernel-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-toolsUpgrade kernel-rt-modulesUpgrade kernel-debug-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debuginfoUpgrade kernel-rtUpgrade perf-debuginfo | Nov 19, 2024 | May 19, 2024 |
| Suse | — | Upgrade dtb-armUpgrade kernel-kvmsmall-develUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade dtb-amdUpgrade kernel-docsUpgrade kernel-devel-rtUpgrade dtb-renesasUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-vdsoUpgrade kernel-symsUpgrade kernel-kvmsmallUpgrade kernel-debug-develUpgrade kernel-64kb-optionalUpgrade kernel-defaultUpgrade kernel-default-baseUpgrade dtb-apmUpgrade kernel-zfcpdumpUpgrade kernel-develUpgrade kernel-default-livepatch-develUpgrade ocfs2-kmp-defaultUpgrade dlm-kmp-azureUpgrade ocfs2-kmp-rtUpgrade dtb-qcomUpgrade gfs2-kmp-64kbUpgrade kernel-obs-qaUpgrade cluster-md-kmp-rtUpgrade dtb-allwinnerUpgrade kernel-macrosUpgrade cluster-md-kmp-azureUpgrade dtb-mediatekUpgrade dtb-xilinxUpgrade reiserfs-kmp-azureUpgrade kernel-rt-develUpgrade dtb-exynosUpgrade kernel-default-optionalUpgrade kernel-default-extraUpgrade kernel-debugUpgrade dtb-hisiliconUpgrade kernel-rt-livepatchUpgrade cluster-md-kmp-defaultUpgrade gfs2-kmp-rtUpgrade kernel-64kb-develUpgrade kernel-default-livepatchUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-base-rebuildUpgrade kernel-obs-buildUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt_debug-develUpgrade kernel-rtUpgrade kernel-devel-azureUpgrade kernel-azure-develUpgrade kernel-kvmsmall-vdsoUpgrade dtb-freescaleUpgrade kernel-azure-livepatch-develUpgrade kernel-rt_debugUpgrade kernel-64kb-extraUpgrade dtb-sprdUpgrade dtb-rockchipUpgrade dtb-marvellUpgrade kernel-source-rtUpgrade dlm-kmp-rtUpgrade kernel-64kbUpgrade kernel-source-azureUpgrade kernel-rt-vdsoUpgrade kernel-rt-extraUpgrade dtb-broadcomUpgrade dtb-amlogicUpgrade dtb-caviumUpgrade kernel-rt-optionalUpgrade kernel-azure-optionalUpgrade kernel-azure-vdsoUpgrade kernel-azureUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade kernel-syms-rtUpgrade gfs2-kmp-defaultUpgrade kernel-default-develUpgrade kernel-rt-livepatch-develUpgrade kernel-debug-vdsoUpgrade dtb-lgUpgrade dtb-socionextUpgrade gfs2-kmp-azureUpgrade dlm-kmp-64kbUpgrade kernel-docs-htmlUpgrade kernel-debug-livepatch-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-syms-azureUpgrade dtb-alteraUpgrade kernel-source-vanillaUpgrade kernel-sourceUpgrade kernel-azure-extraUpgrade dtb-nvidiaUpgrade dtb-appleUpgrade dtb-amazonUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-azure | Jun 13, 2024 | May 19, 2024 |
| Ubuntu | — | Upgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1008-ibmUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-gcpUpgrade linux-image-oracle-64kUpgrade linux-image-awsUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1008-oracleUpgrade linux-image-6.8.0-1007-intelUpgrade linux-image-6.8.0-1011-awsUpgrade linux-image-6.8.0-1008-oracle-64kUpgrade linux-image-6.8.0-1010-azureUpgrade linux-image-intelUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-virtualUpgrade linux-image-nvidia-64kUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1006-gkeUpgrade linux-image-oem-24.04Upgrade linux-image-kvmUpgrade linux-image-ibmUpgrade linux-image-6.8.0-38-genericUpgrade linux-image-genericUpgrade linux-image-6.8.0-1008-oemUpgrade linux-image-oracleUpgrade linux-image-6.8.0-38-lowlatencyUpgrade linux-image-azureUpgrade linux-image-6.8.0-1010-gcpUpgrade linux-image-6.8.0-1007-raspiUpgrade linux-image-6.8.0-38-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-38-generic-64kUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1009-nvidia-64kUpgrade linux-image-6.8.0-1010-azure-fdeUpgrade linux-image-6.8.0-1009-nvidiaUpgrade linux-image-gkeUpgrade linux-image-lowlatencyUpgrade linux-image-nvidiaUpgrade linux-image-raspi | Jul 12, 2024 | May 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | May 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub