In the Linux kernel, the following vulnerability has been resolved:
hv_netvsc: Don't free decrypted memory
In CoCo VMs it is possible for the untrusted host to cause set_memory_encrypted() or set_memory_decrypted() to fail such that an error is returned and the resulting memory is shared. Callers need to take care to handle these errors to avoid returning decrypted (shared) memory to the page allocator, which could lead to functional or security issues.
The netvsc driver could free decrypted/shared pages if set_memory_decrypted() fails. Check the decrypted field in the gpadl to decide whether to free the memory.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 15, 2025 | May 30, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 30, 2024 |
| Suse | — | Upgrade kernel-default-develUpgrade kernel-default-extraUpgrade kernel-kvmsmallUpgrade kernel-default-optionalUpgrade dlm-kmp-64kbUpgrade dtb-lgUpgrade gfs2-kmp-azureUpgrade kernel-kvmsmall-vdsoUpgrade cluster-md-kmp-azureUpgrade kernel-64kb-livepatch-develUpgrade kernel-devel-azureUpgrade kernel-docs-htmlUpgrade ocfs2-kmp-rtUpgrade dtb-freescaleUpgrade kernel-symsUpgrade kernel-rt-livepatchUpgrade kernel-source-vanillaUpgrade kernel-rt-vdsoUpgrade kernel-64kbUpgrade kernel-zfcpdumpUpgrade kselftests-kmp-64kbUpgrade kernel-sourceUpgrade kernel-64kb-optionalUpgrade kernel-syms-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-azure-extraUpgrade cluster-md-kmp-rtUpgrade kernel-azure-develUpgrade gfs2-kmp-64kbUpgrade kernel-azure-livepatch-develUpgrade kernel-azureUpgrade kernel-rt_debug-develUpgrade kernel-default-base-rebuildUpgrade gfs2-kmp-rtUpgrade kernel-rtUpgrade kernel-develUpgrade kernel-source-rtUpgrade dtb-hisiliconUpgrade ocfs2-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-rt-optionalUpgrade dtb-amazonUpgrade kernel-default-vdsoUpgrade dtb-broadcomUpgrade dtb-xilinxUpgrade dtb-qcomUpgrade kernel-kvmsmall-livepatch-develUpgrade reiserfs-kmp-64kbUpgrade kernel-azure-optionalUpgrade dtb-alteraUpgrade kselftests-kmp-azureUpgrade kernel-default-livepatchUpgrade dtb-allwinnerUpgrade dtb-caviumUpgrade kernel-kvmsmall-develUpgrade dtb-exynosUpgrade kernel-rt-develUpgrade gfs2-kmp-defaultUpgrade dtb-amdUpgrade ocfs2-kmp-azureUpgrade kernel-debugUpgrade kernel-64kb-extraUpgrade reiserfs-kmp-rtUpgrade dtb-armUpgrade dtb-rockchipUpgrade dtb-marvellUpgrade kernel-debug-livepatch-develUpgrade kernel-macrosUpgrade cluster-md-kmp-64kbUpgrade dtb-amlogicUpgrade kernel-azure-vdsoUpgrade kernel-obs-qaUpgrade kernel-default-baseUpgrade dtb-nvidiaUpgrade dlm-kmp-azureUpgrade kernel-obs-buildUpgrade dtb-apmUpgrade dtb-renesasUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-develUpgrade dtb-socionextUpgrade dtb-mediatekUpgrade dtb-appleUpgrade dlm-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-debug-develUpgrade dtb-sprdUpgrade kernel-rt_debugUpgrade dlm-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-rt-extraUpgrade kernel-rt_debug-vdsoUpgrade reiserfs-kmp-defaultUpgrade kernel-devel-rtUpgrade kernel-syms-rtUpgrade kernel-debug-vdsoUpgrade kselftests-kmp-rtUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade kernel-rt_debug-livepatch-devel | Aug 8, 2024 | May 30, 2024 |
| Ubuntu | — | Upgrade linux-image-genericUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-nvidia-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-ibmUpgrade linux-image-nvidiaUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-azureUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-raspiUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-gkeUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-azure-fdeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-gcpUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-6.8.0-40-genericUpgrade linux-image-6.8.0-1010-oemUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oracleUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-awsUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-ibm-classicUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-lowlatency | Aug 9, 2024 | May 30, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub