In the Linux kernel, the following vulnerability has been resolved:
uio_hv_generic: Don't free decrypted memory
In CoCo VMs it is possible for the untrusted host to cause set_memory_encrypted() or set_memory_decrypted() to fail such that an error is returned and the resulting memory is shared. Callers need to take care to handle these errors to avoid returning decrypted (shared) memory to the page allocator, which could lead to functional or security issues.
The VMBus device UIO driver could free decrypted/shared pages if set_memory_decrypted() fails. Check the decrypted field in the gpadl to decide whether to free the memory.
CVSS Details
- CVSS 3.1 Base Score: 8.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade python3-perfUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-libbpf-develUpgrade kernel-modules-extraUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-libbpfUpgrade kernel-debuginfoUpgrade kernel-develUpgrade python3-perf-debuginfoUpgrade kernel-modules-extra-commonUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-libbpf-staticUpgrade kernel-toolsUpgrade kernel-livepatch-6.1.91-99.172Upgrade perfUpgrade bpftool | Jun 11, 2025 | May 30, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | May 30, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 30, 2024 |
| Suse | — | Upgrade kernel-sourceUpgrade kernel-syms-azureUpgrade kernel-azure-optionalUpgrade kernel-default-livepatchUpgrade gfs2-kmp-defaultUpgrade kernel-devel-azureUpgrade kernel-obs-buildUpgrade kernel-source-vanillaUpgrade cluster-md-kmp-azureUpgrade kernel-64kb-optionalUpgrade kernel-azureUpgrade dtb-amazonUpgrade dtb-broadcomUpgrade kernel-source-azureUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-debug-vdsoUpgrade kselftests-kmp-64kbUpgrade kernel-source-rtUpgrade dtb-freescaleUpgrade kernel-rt_debug-develUpgrade dlm-kmp-64kbUpgrade dtb-alteraUpgrade dtb-caviumUpgrade dtb-exynosUpgrade gfs2-kmp-64kbUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-vdsoUpgrade kernel-kvmsmallUpgrade ocfs2-kmp-azureUpgrade kernel-azure-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade reiserfs-kmp-defaultUpgrade dtb-marvellUpgrade kernel-64kbUpgrade dtb-amdUpgrade ocfs2-kmp-defaultUpgrade dtb-lgUpgrade kernel-default-develUpgrade kernel-azure-extraUpgrade dtb-allwinnerUpgrade gfs2-kmp-rtUpgrade kernel-debugUpgrade ocfs2-kmp-64kbUpgrade dtb-appleUpgrade kernel-rt-extraUpgrade kernel-rt_debugUpgrade kernel-debug-develUpgrade kernel-rt-optionalUpgrade kernel-docs-htmlUpgrade kernel-rt-vdsoUpgrade reiserfs-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-azureUpgrade dtb-hisiliconUpgrade kernel-zfcpdumpUpgrade kselftests-kmp-azureUpgrade kernel-defaultUpgrade kernel-symsUpgrade cluster-md-kmp-defaultUpgrade dtb-nvidiaUpgrade kernel-docsUpgrade kernel-debug-livepatch-develUpgrade kselftests-kmp-rtUpgrade kernel-default-extraUpgrade kernel-macrosUpgrade kernel-azure-vdsoUpgrade dtb-amlogicUpgrade kernel-syms-rtUpgrade kernel-64kb-develUpgrade kselftests-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade kernel-obs-qaUpgrade dlm-kmp-rtUpgrade reiserfs-kmp-rtUpgrade kernel-devel-rtUpgrade kernel-default-livepatch-develUpgrade dtb-renesasUpgrade dtb-rockchipUpgrade cluster-md-kmp-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-64kb-extraUpgrade dtb-qcomUpgrade kernel-default-optionalUpgrade kernel-default-base-rebuildUpgrade dlm-kmp-azureUpgrade ocfs2-kmp-rtUpgrade dtb-armUpgrade dtb-xilinxUpgrade dtb-mediatekUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-apmUpgrade kernel-azure-develUpgrade kernel-rt-livepatchUpgrade kernel-rt-develUpgrade kernel-rtUpgrade dlm-kmp-defaultUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade kernel-default-baseUpgrade kernel-develUpgrade dtb-socionextUpgrade dtb-sprd | Aug 8, 2024 | May 30, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-gcpUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-generic-64kUpgrade linux-image-kvmUpgrade linux-image-lowlatency-64kUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-genericUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-nvidia-64kUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-oem-24.04aUpgrade linux-image-ibm-classicUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-ibmUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-oem-24.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1010-oemUpgrade linux-image-gkeUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-azureUpgrade linux-image-awsUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-6.8.0-1009-raspi | Aug 9, 2024 | May 30, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 10, 2025 | May 30, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub