In the Linux kernel, the following vulnerability has been resolved:
dma-direct: Leak pages on dma_set_decrypted() failure
On TDX it is possible for the untrusted host to cause set_memory_encrypted() or set_memory_decrypted() to fail such that an error is returned and the resulting memory is shared. Callers need to take care to handle these errors to avoid returning decrypted (shared) memory to the page allocator, which could lead to functional or security issues.
DMA could free decrypted/shared pages if dma_set_decrypted() fails. This should be a rare case. Just leak the pages in this case instead of freeing them.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debug-modulesUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-zfcpdumpUpgrade kernel-coreUpgrade kernel-debug-develUpgrade kernel-rt-modulesUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-docUpgrade kernel-rt-debug-develUpgrade kernel-rt-debugUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-coreUpgrade kernel-rtUpgrade kernel-rt-debug-modulesUpgrade perfUpgrade kernel-modulesUpgrade kernel-debugUpgrade kernel-zfcpdump-develUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-develUpgrade kernel-cross-headersUpgrade kernel-develUpgrade python3-perfUpgrade kernel-rt-debug-coreUpgrade kernel-rt-coreUpgrade bpftoolUpgrade kernel-zfcpdump-coreUpgrade kernel-tools-libs-develUpgrade kernel-rt-modules-extraUpgrade kernel | Nov 7, 2024 | May 19, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 19, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade bpftoolUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelists | Oct 8, 2024 | May 19, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernel | Oct 9, 2024 | May 19, 2024 |
| Oracle_linux | — | Upgrade kernel | Nov 11, 2024 | May 19, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Nov 6, 2024 | May 19, 2024 |
| Rocky_linux | — | Upgrade kernel-develUpgrade kernel-rt-debug-develUpgrade kernel-cross-headersUpgrade kernel-debuginfoUpgrade perfUpgrade kernel-rt-kvmUpgrade kernel-rt-debug-coreUpgrade python3-perfUpgrade kernel-coreUpgrade kernel-rt-develUpgrade kernel-tools-debuginfoUpgrade kernel-debugUpgrade bpftoolUpgrade kernel-headersUpgrade python3-perf-debuginfoUpgrade kernel-debug-develUpgrade kernel-rt-debugUpgrade kernel-debug-debuginfoUpgrade kernelUpgrade kernel-debug-coreUpgrade kernel-rt-debuginfo-common-x86_64Upgrade kernel-rt-debug-kvmUpgrade kernel-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modulesUpgrade kernel-tools-libsUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-debuginfoUpgrade kernel-tools-libs-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-debug-modulesUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-rtUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modules-extra | Nov 19, 2024 | May 19, 2024 |
| Suse | — | Upgrade dtb-freescaleUpgrade kernel-azureUpgrade kernel-default-livepatchUpgrade kernel-azure-optionalUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt_debugUpgrade kernel-default-base-rebuildUpgrade kernel-azure-vdsoUpgrade kernel-source-vanillaUpgrade kselftests-kmp-azureUpgrade kernel-rt_debug-vdsoUpgrade reiserfs-kmp-rtUpgrade kernel-rtUpgrade kernel-rt_debug-develUpgrade kernel-azure-livepatch-develUpgrade kernel-rt-optionalUpgrade dtb-alteraUpgrade dtb-appleUpgrade cluster-md-kmp-64kbUpgrade dtb-nvidiaUpgrade kernel-sourceUpgrade reiserfs-kmp-64kbUpgrade kernel-syms-azureUpgrade kernel-azure-develUpgrade dtb-broadcomUpgrade dtb-amazonUpgrade dtb-amlogicUpgrade kernel-azure-extraUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-devel-azureUpgrade kernel-syms-rtUpgrade kernel-rt-vdsoUpgrade kernel-64kbUpgrade kernel-rt-extraUpgrade kernel-source-azureUpgrade kernel-source-rtUpgrade dlm-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade dlm-kmp-defaultUpgrade kernel-docs-htmlUpgrade dtb-caviumUpgrade kernel-obs-buildUpgrade dlm-kmp-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-socionextUpgrade kselftests-kmp-64kbUpgrade gfs2-kmp-azureUpgrade kernel-debug-vdsoUpgrade dtb-sprdUpgrade gfs2-kmp-defaultUpgrade kernel-64kb-extraUpgrade kernel-rt-livepatch-develUpgrade kernel-default-develUpgrade dtb-lgUpgrade dtb-marvellUpgrade dtb-rockchipUpgrade kernel-debug-livepatch-develUpgrade kselftests-kmp-defaultUpgrade kernel-kvmsmall-develUpgrade kernel-default-livepatch-develUpgrade kernel-defaultUpgrade kernel-symsUpgrade reiserfs-kmp-defaultUpgrade kernel-devel-rtUpgrade kselftests-kmp-rtUpgrade kernel-debug-develUpgrade kernel-64kb-livepatch-develUpgrade dtb-armUpgrade dtb-apmUpgrade dtb-renesasUpgrade reiserfs-kmp-azureUpgrade kernel-macrosUpgrade kernel-docsUpgrade kernel-default-optionalUpgrade kernel-debugUpgrade dtb-mediatekUpgrade cluster-md-kmp-azureUpgrade kernel-rt-develUpgrade kernel-develUpgrade kernel-zfcpdumpUpgrade kernel-default-extraUpgrade dtb-hisiliconUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-livepatchUpgrade dtb-xilinxUpgrade dtb-amdUpgrade ocfs2-kmp-azureUpgrade kernel-obs-qaUpgrade dtb-allwinnerUpgrade dlm-kmp-azureUpgrade dtb-qcomUpgrade gfs2-kmp-64kbUpgrade kernel-default-baseUpgrade kernel-kvmsmallUpgrade kernel-default-vdsoUpgrade kernel-64kb-optionalUpgrade kernel-64kb-develUpgrade dtb-exynosUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-rtUpgrade ocfs2-kmp-defaultUpgrade gfs2-kmp-rt | Jun 13, 2024 | May 19, 2024 |
| Ubuntu | — | Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1011-awsUpgrade linux-image-oem-24.04aUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1008-ibmUpgrade linux-image-6.8.0-1008-oracle-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-gcpUpgrade linux-image-6.8.0-38-genericUpgrade linux-image-6.8.0-1008-oracleUpgrade linux-image-kvmUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1007-intelUpgrade linux-image-intelUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1006-gkeUpgrade linux-image-6.8.0-1010-azureUpgrade linux-image-oracle-64kUpgrade linux-image-awsUpgrade linux-image-nvidia-64kUpgrade linux-image-ibmUpgrade linux-image-oem-24.04Upgrade linux-image-azure-fdeUpgrade linux-image-lowlatency-64kUpgrade linux-image-genericUpgrade linux-image-azureUpgrade linux-image-6.8.0-1010-gcpUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1009-nvidiaUpgrade linux-image-generic-64kUpgrade linux-image-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1007-raspiUpgrade linux-image-6.8.0-1010-azure-fdeUpgrade linux-image-6.8.0-1009-nvidia-64kUpgrade linux-image-6.8.0-38-generic-64kUpgrade linux-image-6.8.0-38-lowlatency-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-38-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1008-oemUpgrade linux-image-gke | Jul 12, 2024 | May 19, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | May 19, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub