In the Linux kernel, the following vulnerability has been resolved:
uio_hv_generic: Don't free decrypted memory
In CoCo VMs it is possible for the untrusted host to cause set_memory_encrypted() or set_memory_decrypted() to fail such that an error is returned and the resulting memory is shared. Callers need to take care to handle these errors to avoid returning decrypted (shared) memory to the page allocator, which could lead to functional or security issues.
The VMBus device UIO driver could free decrypted/shared pages if set_memory_decrypted() fails. Check the decrypted field in the gpadl to decide whether to free the memory.
CVSS Details
- CVSS 3.1 Base Score: 8.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-modules-extraUpgrade kernel-libbpf-develUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernelUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade python3-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-libbpfUpgrade python3-perf-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-toolsUpgrade bpftoolUpgrade kernel-tools-develUpgrade kernel-develUpgrade kernel-livepatch-6.1.91-99.172Upgrade perfUpgrade kernel-libbpf-staticUpgrade kernel-modules-extra-common | Jun 11, 2025 | May 30, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 30, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 30, 2024 |
| Suse | — | Upgrade kernel-debug-vdsoUpgrade gfs2-kmp-azureUpgrade dtb-alteraUpgrade kernel-default-develUpgrade kernel-debugUpgrade kernel-azure-extraUpgrade dtb-exynosUpgrade kernel-kvmsmallUpgrade kernel-default-vdsoUpgrade kernel-64kb-optionalUpgrade dtb-hisiliconUpgrade dtb-caviumUpgrade kernel-kvmsmall-develUpgrade kernel-zfcpdumpUpgrade dlm-kmp-64kbUpgrade kernel-source-rtUpgrade kernel-rt_debug-develUpgrade dtb-freescaleUpgrade dtb-broadcomUpgrade dtb-amazonUpgrade reiserfs-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azureUpgrade kernel-source-vanillaUpgrade kernel-obs-buildUpgrade kernel-default-livepatchUpgrade gfs2-kmp-defaultUpgrade dtb-appleUpgrade kernel-debug-develUpgrade kernel-azure-optionalUpgrade cluster-md-kmp-azureUpgrade kernel-rt_debugUpgrade kernel-devel-azureUpgrade kernel-sourceUpgrade kernel-syms-azureUpgrade kernel-rt-vdsoUpgrade dtb-allwinnerUpgrade ocfs2-kmp-defaultUpgrade kernel-rt-optionalUpgrade kernel-rt-extraUpgrade kernel-64kbUpgrade ocfs2-kmp-64kbUpgrade dtb-amdUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kselftests-kmp-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-docs-htmlUpgrade kernel-azure-livepatch-develUpgrade gfs2-kmp-rtUpgrade dtb-marvellUpgrade dtb-lgUpgrade kselftests-kmp-64kbUpgrade gfs2-kmp-64kbUpgrade kernel-64kb-livepatch-develUpgrade cluster-md-kmp-64kbUpgrade kernel-64kb-extraUpgrade kernel-rt-livepatch-develUpgrade cluster-md-kmp-rtUpgrade dtb-qcomUpgrade kernel-azure-vdsoUpgrade kernel-symsUpgrade dtb-socionextUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-default-base-rebuildUpgrade kernel-default-optionalUpgrade dlm-kmp-defaultUpgrade kernel-rt-livepatchUpgrade kernel-azure-develUpgrade dtb-mediatekUpgrade kernel-rt-develUpgrade kernel-rtUpgrade dtb-apmUpgrade kernel-64kb-develUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade dlm-kmp-azureUpgrade kernel-defaultUpgrade kernel-debug-livepatch-develUpgrade dtb-sprdUpgrade reiserfs-kmp-azureUpgrade kernel-default-baseUpgrade dtb-amlogicUpgrade kernel-default-extraUpgrade kernel-obs-qaUpgrade dtb-rockchipUpgrade dtb-nvidiaUpgrade kernel-syms-rtUpgrade kernel-docsUpgrade kernel-develUpgrade dtb-xilinxUpgrade kernel-devel-rtUpgrade dtb-renesasUpgrade kernel-default-livepatch-develUpgrade kselftests-kmp-defaultUpgrade kernel-rt_debug-vdso | Aug 8, 2024 | May 30, 2024 |
| Ubuntu | — | Upgrade linux-image-azureUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-awsUpgrade linux-image-nvidia-6.8Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-raspiUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-ibmUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-generic-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-nvidiaUpgrade linux-image-oracleUpgrade linux-image-genericUpgrade linux-image-azure-fdeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-oem-24.04aUpgrade linux-image-lowlatency-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-ibm-classicUpgrade linux-image-generic-lpaeUpgrade linux-image-kvm | Aug 9, 2024 | May 30, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | May 30, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub