In the Linux kernel, the following vulnerability has been resolved:
Drivers: hv: vmbus: Don't free ring buffers that couldn't be re-encrypted
In CoCo VMs it is possible for the untrusted host to cause set_memory_encrypted() or set_memory_decrypted() to fail such that an error is returned and the resulting memory is shared. Callers need to take care to handle these errors to avoid returning decrypted (shared) memory to the page allocator, which could lead to functional or security issues.
The VMBus ring buffer code could free decrypted/shared pages if set_memory_decrypted() fails. Check the decrypted field in the struct vmbus_gpadl for the ring buffers to decide whether to free the memory.
CVSS Details
- CVSS 3.1 Base Score: 9.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-livepatch-6.1.91-99.172Upgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade kernel-toolsUpgrade kernel-modules-extra-commonUpgrade kernel-libbpf-staticUpgrade kernel-tools-debuginfoUpgrade perfUpgrade perf-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-headersUpgrade kernel-libbpf-develUpgrade kernelUpgrade kernel-develUpgrade bpftoolUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-modules-extraUpgrade kernel-libbpfUpgrade python3-perfUpgrade kernel-tools-devel | Jun 11, 2025 | May 30, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 30, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 30, 2024 |
| Suse | — | Upgrade dtb-amazonUpgrade kernel-kvmsmall-vdsoUpgrade dtb-appleUpgrade dtb-sprdUpgrade kernel-64kb-extraUpgrade kernel-symsUpgrade kernel-rt_debug-vdsoUpgrade dtb-freescaleUpgrade dlm-kmp-azureUpgrade kernel-64kb-optionalUpgrade kernel-default-baseUpgrade cluster-md-kmp-defaultUpgrade kernel-default-livepatchUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-docs-htmlUpgrade kernel-rt-optionalUpgrade dlm-kmp-rtUpgrade kernel-source-rtUpgrade dtb-hisiliconUpgrade kernel-syms-rtUpgrade reiserfs-kmp-rtUpgrade kernel-rt_debugUpgrade kernel-debugUpgrade kernel-64kbUpgrade kernel-debug-livepatch-develUpgrade gfs2-kmp-64kbUpgrade dtb-renesasUpgrade reiserfs-kmp-64kbUpgrade dtb-amdUpgrade kernel-azure-vdsoUpgrade dtb-broadcomUpgrade kselftests-kmp-azureUpgrade dtb-allwinnerUpgrade gfs2-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-develUpgrade kernel-rt-livepatch-develUpgrade dtb-socionextUpgrade kernel-rt_debug-develUpgrade kernel-64kb-livepatch-develUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-azure-extraUpgrade kselftests-kmp-rtUpgrade ocfs2-kmp-azureUpgrade kernel-debug-develUpgrade kernel-defaultUpgrade kernel-default-develUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-docsUpgrade ocfs2-kmp-64kbUpgrade dtb-marvellUpgrade dlm-kmp-defaultUpgrade kernel-source-azureUpgrade kselftests-kmp-64kbUpgrade kernel-azureUpgrade dtb-nvidiaUpgrade kernel-default-vdsoUpgrade kernel-source-vanillaUpgrade kernel-develUpgrade kernel-default-extraUpgrade kernel-default-base-rebuildUpgrade kernel-azure-optionalUpgrade cluster-md-kmp-rtUpgrade dtb-rockchipUpgrade ocfs2-kmp-rtUpgrade kernel-rt-extraUpgrade kernel-kvmsmallUpgrade kernel-debug-vdsoUpgrade kernel-azure-livepatch-develUpgrade kernel-zfcpdumpUpgrade gfs2-kmp-azureUpgrade dtb-caviumUpgrade kernel-obs-qaUpgrade dtb-alteraUpgrade dtb-exynosUpgrade reiserfs-kmp-azureUpgrade kernel-rt-develUpgrade kernel-devel-rtUpgrade dtb-apmUpgrade dtb-amlogicUpgrade gfs2-kmp-rtUpgrade kernel-sourceUpgrade kernel-obs-buildUpgrade dlm-kmp-64kbUpgrade kernel-rtUpgrade dtb-xilinxUpgrade kernel-kvmsmall-develUpgrade kernel-default-optionalUpgrade ocfs2-kmp-defaultUpgrade kernel-syms-azureUpgrade kernel-rt-vdsoUpgrade kernel-macrosUpgrade dtb-lgUpgrade dtb-armUpgrade cluster-md-kmp-azureUpgrade dtb-mediatekUpgrade kernel-devel-azureUpgrade kernel-azure-develUpgrade kernel-rt-livepatchUpgrade dtb-qcom | Aug 8, 2024 | May 30, 2024 |
| Ubuntu | — | Upgrade linux-image-gcpUpgrade linux-image-virtualUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-gkeUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-kvmUpgrade linux-image-nvidia-6.8Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-awsUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oem-24.04Upgrade linux-image-genericUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-nvidiaUpgrade linux-image-generic-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-azureUpgrade linux-image-ibm-classicUpgrade linux-image-lowlatencyUpgrade linux-image-nvidia-64kUpgrade linux-image-azure-fdeUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-6.8.0-1012-azure | Aug 9, 2024 | May 30, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | May 30, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub