In the Linux kernel, the following vulnerability has been resolved:
x86/tdx: Fix data leak in mmio_read()
The mmio_read() function makes a TDVMCALL to retrieve MMIO data for an address from the VMM.
Sean noticed that mmio_read() unintentionally exposes the value of an initialized variable (val) on the stack to the VMM.
This variable is only needed as an output value. It did not need to be passed to the VMM in the first place.
Do not send the original value of *val to the VMM.
[ dhansen: clarify what 'val' is used for. ]
CVSS Details
- CVSS 3.1 Base Score: 3.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Oct 7, 2024 | Sep 18, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 18, 2024 |
| Suse | — | Upgrade dtb-amlogicUpgrade kernel-debugUpgrade dlm-kmp-azureUpgrade dtb-apmUpgrade dtb-hisiliconUpgrade kselftests-kmp-rtUpgrade kernel-rt_debug-vdsoUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-rtUpgrade ocfs2-kmp-rtUpgrade reiserfs-kmp-azureUpgrade kernel-azure-vdsoUpgrade dtb-xilinxUpgrade kernel-kvmsmallUpgrade dtb-renesasUpgrade kernel-syms-rtUpgrade cluster-md-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade reiserfs-kmp-defaultUpgrade kernel-devel-rtUpgrade kernel-kvmsmall-develUpgrade kernel-macrosUpgrade kernel-docsUpgrade kernel-zfcpdumpUpgrade gfs2-kmp-64kbUpgrade kernel-default-optionalUpgrade kernel-develUpgrade cluster-md-kmp-azureUpgrade kernel-azure-livepatch-develUpgrade kernel-devel-azureUpgrade ocfs2-kmp-azureUpgrade kernel-debug-livepatch-develUpgrade dtb-armUpgrade kernel-rt-livepatchUpgrade kernel-64kb-livepatch-develUpgrade cluster-md-kmp-rtUpgrade dtb-qcomUpgrade dtb-amdUpgrade kernel-debug-develUpgrade kernel-default-extraUpgrade kselftests-kmp-defaultUpgrade kernel-64kb-optionalUpgrade kernel-syms-azureUpgrade kernel-obs-qaUpgrade kernel-defaultUpgrade kernel-64kb-develUpgrade gfs2-kmp-rtUpgrade kernel-rt-develUpgrade kernel-symsUpgrade dtb-mediatekUpgrade kernel-rt-optionalUpgrade dtb-caviumUpgrade kernel-default-livepatch-develUpgrade dtb-sprdUpgrade dtb-amazonUpgrade ocfs2-kmp-defaultUpgrade kernel-azureUpgrade reiserfs-kmp-64kbUpgrade dtb-broadcomUpgrade kernel-source-azureUpgrade kernel-rtUpgrade kernel-default-develUpgrade dtb-socionextUpgrade kernel-default-livepatchUpgrade dlm-kmp-64kbUpgrade kernel-64kb-extraUpgrade kernel-debug-vdsoUpgrade kselftests-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-source-rtUpgrade kernel-azure-extraUpgrade kernel-azure-develUpgrade gfs2-kmp-azureUpgrade dtb-nvidiaUpgrade dtb-allwinnerUpgrade cluster-md-kmp-64kbUpgrade kernel-default-baseUpgrade dtb-marvellUpgrade dtb-exynosUpgrade kernel-default-vdsoUpgrade dtb-freescaleUpgrade kselftests-kmp-azureUpgrade kernel-rt_debugUpgrade kernel-rt-vdsoUpgrade kernel-rt-extraUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-base-rebuildUpgrade dtb-rockchipUpgrade dtb-lgUpgrade kernel-sourceUpgrade gfs2-kmp-defaultUpgrade kernel-rt_debug-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-docs-htmlUpgrade dlm-kmp-rtUpgrade dtb-alteraUpgrade kernel-obs-buildUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-appleUpgrade kernel-azure-optionalUpgrade kernel-64kb | Dec 5, 2025 | Oct 8, 2024 |
| Ubuntu | — | Upgrade linux-image-oem-22.04cUpgrade linux-image-nvidiaUpgrade linux-image-raspiUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-ibmUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gkeopUpgrade linux-image-oem-22.04aUpgrade linux-image-oracle-64kUpgrade linux-image-ibm-classicUpgrade linux-image-gcpUpgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-azureUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-nvidia-64kUpgrade linux-image-oem-22.04bUpgrade linux-image-virtualUpgrade linux-image-oem-22.04dUpgrade linux-image-oem-24.04aUpgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1020-azureUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-oem-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-50-genericUpgrade linux-image-gkeUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-lowlatency-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-lowlatencyUpgrade linux-image-oem-22.04Upgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1018-oemUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-azure-fdeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oracleUpgrade linux-image-6.8.0-1020-awsUpgrade linux-image-aws | Dec 13, 2024 | Sep 18, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 18, 2024 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub