In the Linux kernel, the following vulnerability has been resolved:
dma-direct: Leak pages on dma_set_decrypted() failure
On TDX it is possible for the untrusted host to cause set_memory_encrypted() or set_memory_decrypted() to fail such that an error is returned and the resulting memory is shared. Callers need to take care to handle these errors to avoid returning decrypted (shared) memory to the page allocator, which could lead to functional or security issues.
DMA could free decrypted/shared pages if dma_set_decrypted() fails. This should be a rare case. Just leak the pages in this case instead of freeing them.
CVSS Details
- CVSS 3.1 Base Score: 9.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-develUpgrade kernel-cross-headersUpgrade kernel-rt-coreUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libs-develUpgrade kernel-rt-develUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernelUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-tools-libsUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debug-develUpgrade kernel-debug-modulesUpgrade perfUpgrade kernel-abi-stablelistsUpgrade kernel-debug-coreUpgrade kernel-rt-debugUpgrade kernel-zfcpdumpUpgrade kernel-toolsUpgrade kernel-docUpgrade kernel-debugUpgrade kernel-headersUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-modules-extraUpgrade kernel-coreUpgrade kernel-modulesUpgrade kernel-debug-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-rtUpgrade kernel-rt-debug-modules | Nov 7, 2024 | May 19, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 19, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-toolsUpgrade bpftool | Oct 8, 2024 | May 19, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernelUpgrade kernel-tools-libs | Oct 9, 2024 | May 19, 2024 |
| Oracle_linux | — | Upgrade kernel | Nov 11, 2024 | May 19, 2024 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Nov 6, 2024 | May 19, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-modulesUpgrade kernel-modulesUpgrade kernel-modules-extraUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-rt-debug-kvmUpgrade bpftoolUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debugUpgrade python3-perf-debuginfoUpgrade kernel-tools-libsUpgrade kernel-rt-kvmUpgrade kernel-headersUpgrade kernel-rt-develUpgrade kernel-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-coreUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-coreUpgrade python3-perfUpgrade perfUpgrade kernel-rt-coreUpgrade kernel-cross-headersUpgrade kernel-rt-debug-debuginfoUpgrade kernel-coreUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-rtUpgrade kernel-rt-modulesUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-tools-libs-devel | Nov 19, 2024 | May 19, 2024 |
| Suse | — | Upgrade dtb-hisiliconUpgrade kernel-default-extraUpgrade cluster-md-kmp-defaultUpgrade dtb-xilinxUpgrade kernel-rt-develUpgrade reiserfs-kmp-azureUpgrade kernel-macrosUpgrade cluster-md-kmp-azureUpgrade kernel-docsUpgrade dtb-mediatekUpgrade kernel-rt-livepatchUpgrade dtb-qcomUpgrade dlm-kmp-azureUpgrade dtb-allwinnerUpgrade ocfs2-kmp-defaultUpgrade dtb-renesasUpgrade gfs2-kmp-64kbUpgrade kernel-kvmsmallUpgrade kernel-debugUpgrade kernel-obs-qaUpgrade kernel-default-optionalUpgrade dtb-armUpgrade kernel-64kb-optionalUpgrade kselftests-kmp-defaultUpgrade dtb-apmUpgrade kernel-kvmsmall-develUpgrade kselftests-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-livepatch-develUpgrade kernel-debug-develUpgrade kernel-devel-rtUpgrade cluster-md-kmp-rtUpgrade dtb-exynosUpgrade kernel-64kb-develUpgrade kernel-defaultUpgrade kernel-develUpgrade kernel-zfcpdumpUpgrade gfs2-kmp-rtUpgrade kernel-default-baseUpgrade ocfs2-kmp-azureUpgrade dtb-amdUpgrade kernel-default-vdsoUpgrade kernel-symsUpgrade dlm-kmp-64kbUpgrade kernel-obs-buildUpgrade kernel-source-vanillaUpgrade kernel-rt_debug-vdsoUpgrade kernel-rt_debug-develUpgrade kernel-rt-livepatch-develUpgrade cluster-md-kmp-64kbUpgrade dtb-appleUpgrade kernel-azure-livepatch-develUpgrade dtb-freescaleUpgrade kernel-rt_debugUpgrade kernel-default-base-rebuildUpgrade kernel-kvmsmall-vdsoUpgrade kernel-default-livepatchUpgrade kernel-docs-htmlUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-socionextUpgrade kernel-debug-livepatch-develUpgrade gfs2-kmp-azureUpgrade dtb-broadcomUpgrade kernel-source-azureUpgrade kernel-64kbUpgrade dlm-kmp-rtUpgrade kernel-rt-extraUpgrade kernel-source-rtUpgrade dtb-amlogicUpgrade kernel-rt-vdsoUpgrade kernel-64kb-extraUpgrade dtb-sprdUpgrade dtb-rockchipUpgrade dtb-marvellUpgrade dlm-kmp-defaultUpgrade kernel-azure-vdsoUpgrade kernel-azure-optionalUpgrade kernel-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-syms-rtUpgrade kernel-rt-optionalUpgrade kernel-azure-extraUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-64kbUpgrade kernel-default-develUpgrade kernel-debug-vdsoUpgrade kselftests-kmp-64kbUpgrade dtb-caviumUpgrade kernel-sourceUpgrade dtb-lgUpgrade dtb-amazonUpgrade kernel-syms-azureUpgrade kernel-devel-azureUpgrade dtb-nvidiaUpgrade kernel-rt_debug-livepatch-develUpgrade gfs2-kmp-defaultUpgrade kernel-azure-develUpgrade kernel-rtUpgrade dtb-alteraUpgrade kselftests-kmp-azure | Jun 13, 2024 | May 19, 2024 |
| Ubuntu | — | Upgrade linux-image-kvmUpgrade linux-image-6.8.0-38-genericUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-virtualUpgrade linux-image-6.8.0-1010-azureUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1008-ibmUpgrade linux-image-6.8.0-1011-awsUpgrade linux-image-awsUpgrade linux-image-nvidia-64kUpgrade linux-image-ibmUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1006-gkeUpgrade linux-image-intelUpgrade linux-image-oem-24.04Upgrade linux-image-gcpUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1008-oracle-64kUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1008-oracleUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1007-intelUpgrade linux-image-azure-fdeUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1007-raspiUpgrade linux-image-6.8.0-1010-gcpUpgrade linux-image-6.8.0-1009-nvidiaUpgrade linux-image-gkeUpgrade linux-image-6.8.0-38-generic-64kUpgrade linux-image-nvidiaUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-oracleUpgrade linux-image-6.8.0-1008-oemUpgrade linux-image-raspiUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-38-lowlatencyUpgrade linux-image-genericUpgrade linux-image-6.8.0-38-lowlatency-64kUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1010-azure-fdeUpgrade linux-image-azureUpgrade linux-image-6.8.0-1009-nvidia-64kUpgrade linux-image-generic-64k | Jul 12, 2024 | May 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | May 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub