The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In the Linux kernel, the following vulnerability has been resolved:
hv_netvsc: Don't free decrypted memory
In CoCo VMs it is possible for the untrusted host to cause set_memory_encrypted() or set_memory_decrypted() to fail such that an error is returned and the resulting memory is shared. Callers need to take care to handle these errors to avoid returning decrypted (shared) memory to the page allocator, which could lead to functional or security issues.
The netvsc driver could free decrypted/shared pages if set_memory_decrypted() fails. Check the decrypted field in the gpadl to decide whether to free the memory.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | May 15, 2025 | May 30, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 30, 2024 |
| Suse | — | Upgrade kernel-rtUpgrade kernel-syms-azureUpgrade dtb-xilinxUpgrade kernel-default-base-rebuildUpgrade dtb-qcomUpgrade kernel-64kb-optionalUpgrade dtb-broadcomUpgrade kernel-sourceUpgrade kernel-zfcpdumpUpgrade kernel-rt-vdsoUpgrade kernel-rt-optionalUpgrade kernel-kvmsmallUpgrade kernel-default-vdsoUpgrade kernel-docs-htmlUpgrade kernel-rt-livepatchUpgrade dlm-kmp-64kbUpgrade kernel-source-rtUpgrade gfs2-kmp-azureUpgrade kernel-default-develUpgrade kernel-symsUpgrade kernel-default-extraUpgrade kernel-default-optionalUpgrade dtb-amazonUpgrade kselftests-kmp-64kbUpgrade dtb-freescaleUpgrade kernel-64kb-livepatch-develUpgrade ocfs2-kmp-rtUpgrade kernel-devel-azureUpgrade cluster-md-kmp-rtUpgrade gfs2-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade kernel-source-vanillaUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-azure-extraUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-develUpgrade dtb-exynosUpgrade kernel-azureUpgrade kernel-rt_debug-develUpgrade dtb-lgUpgrade dtb-hisiliconUpgrade gfs2-kmp-rtUpgrade kernel-kvmsmall-develUpgrade kernel-azure-optionalUpgrade dtb-alteraUpgrade ocfs2-kmp-64kbUpgrade kernel-develUpgrade kselftests-kmp-azureUpgrade kernel-64kbUpgrade dtb-allwinnerUpgrade kernel-source-azureUpgrade reiserfs-kmp-64kbUpgrade dtb-caviumUpgrade kernel-kvmsmall-vdsoUpgrade ocfs2-kmp-defaultUpgrade kernel-default-livepatchUpgrade dlm-kmp-rtUpgrade kernel-debug-develUpgrade dtb-sprdUpgrade kernel-64kb-develUpgrade dtb-mediatekUpgrade dtb-appleUpgrade cluster-md-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade kernel-macrosUpgrade dtb-socionextUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-debug-livepatch-develUpgrade dtb-armUpgrade kernel-azure-vdsoUpgrade kernel-rt-extraUpgrade kernel-64kb-extraUpgrade dtb-renesasUpgrade dtb-apmUpgrade dtb-amdUpgrade ocfs2-kmp-azureUpgrade kernel-rt-develUpgrade kernel-debugUpgrade kselftests-kmp-rtUpgrade dtb-amlogicUpgrade dtb-nvidiaUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade kernel-obs-buildUpgrade gfs2-kmp-defaultUpgrade kernel-obs-qaUpgrade kernel-default-baseUpgrade kernel-rt_debugUpgrade dlm-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade kernel-syms-rtUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-debug-vdsoUpgrade dtb-rockchipUpgrade reiserfs-kmp-azureUpgrade dtb-marvellUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-devel-rtUpgrade kernel-default-livepatch-devel | Aug 8, 2024 | May 30, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-40-genericUpgrade linux-image-6.8.0-1010-oracleUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1010-oemUpgrade linux-image-6.8.0-1010-oracle-64kUpgrade linux-image-awsUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-gcpUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-kvmUpgrade linux-image-azure-fdeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1012-gcpUpgrade linux-image-6.8.0-1008-gkeUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1011-nvidiaUpgrade linux-image-6.8.0-1011-nvidia-64kUpgrade linux-image-oracle-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-40-generic-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-nvidia-64kUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1011-nvidia-lowlatencyUpgrade linux-image-6.8.0-1009-raspiUpgrade linux-image-6.8.0-1011-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1012-azureUpgrade linux-image-azureUpgrade linux-image-6.8.0-1012-azure-fdeUpgrade linux-image-gkeUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1010-ibmUpgrade linux-image-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-raspiUpgrade linux-image-nvidia-6.8Upgrade linux-image-virtualUpgrade linux-image-6.8.0-40-lowlatencyUpgrade linux-image-6.8.0-40-lowlatency-64kUpgrade linux-image-6.8.0-1013-awsUpgrade linux-image-oem-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-nvidia | Aug 9, 2024 | May 30, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub