In the Linux kernel, the following vulnerability has been resolved:
x86/tdx: Fix data leak in mmio_read()
The mmio_read() function makes a TDVMCALL to retrieve MMIO data for an address from the VMM.
Sean noticed that mmio_read() unintentionally exposes the value of an initialized variable (val) on the stack to the VMM.
This variable is only needed as an output value. It did not need to be passed to the VMM in the first place.
Do not send the original value of *val to the VMM.
[ dhansen: clarify what 'val' is used for. ]
CVSS Details
- CVSS 3.1 Base Score: 3.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Oct 7, 2024 | Sep 18, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 18, 2024 |
| Suse | — | Upgrade reiserfs-kmp-64kbUpgrade dtb-broadcomUpgrade gfs2-kmp-defaultUpgrade kernel-docs-htmlUpgrade kernel-default-develUpgrade kernel-rtUpgrade kernel-source-azureUpgrade ocfs2-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade dlm-kmp-rtUpgrade kernel-obs-buildUpgrade kernel-rt_debug-develUpgrade dtb-appleUpgrade dtb-sprdUpgrade dtb-amazonUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-alteraUpgrade dtb-caviumUpgrade kselftests-kmp-azureUpgrade kernel-64kb-extraUpgrade dlm-kmp-64kbUpgrade kernel-default-livepatchUpgrade dtb-rockchipUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rt-vdsoUpgrade kernel-sourceUpgrade kernel-default-livepatch-develUpgrade dtb-freescaleUpgrade dtb-lgUpgrade kernel-default-vdsoUpgrade kernel-default-base-rebuildUpgrade kernel-rt_debugUpgrade kernel-rt-extraUpgrade dtb-socionextUpgrade kernel-azure-develUpgrade cluster-md-kmp-64kbUpgrade dtb-allwinnerUpgrade kselftests-kmp-64kbUpgrade dtb-nvidiaUpgrade kernel-debug-vdsoUpgrade kernel-azure-optionalUpgrade gfs2-kmp-azureUpgrade kernel-source-vanillaUpgrade ocfs2-kmp-defaultUpgrade kernel-64kbUpgrade kernel-azureUpgrade kernel-azure-extraUpgrade kernel-rt-optionalUpgrade kernel-source-rtUpgrade dtb-exynosUpgrade dtb-marvellUpgrade kernel-default-baseUpgrade kernel-obs-qaUpgrade dtb-renesasUpgrade dtb-mediatekUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-livepatch-develUpgrade dtb-armUpgrade cluster-md-kmp-rtUpgrade kernel-symsUpgrade kernel-defaultUpgrade kernel-64kb-develUpgrade gfs2-kmp-rtUpgrade kernel-syms-azureUpgrade kernel-debug-develUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-azureUpgrade kselftests-kmp-defaultUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-rtUpgrade kernel-kvmsmallUpgrade kernel-azure-vdsoUpgrade dtb-xilinxUpgrade dtb-amlogicUpgrade cluster-md-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-default-optionalUpgrade kernel-syms-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-macrosUpgrade kernel-kvmsmall-develUpgrade kernel-develUpgrade kernel-devel-rtUpgrade kernel-debugUpgrade gfs2-kmp-64kbUpgrade dtb-apmUpgrade dlm-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-rt_debug-vdsoUpgrade kernel-docsUpgrade dtb-hisiliconUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-devel-azureUpgrade dtb-amdUpgrade kernel-rt-livepatchUpgrade kernel-rt-develUpgrade kernel-default-extraUpgrade kernel-64kb-optionalUpgrade kernel-64kb-livepatch-develUpgrade dtb-qcom | Dec 5, 2025 | Oct 8, 2024 |
| Ubuntu | — | Upgrade linux-image-raspiUpgrade linux-image-gkeopUpgrade linux-image-oem-22.04cUpgrade linux-image-ibm-classicUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-ibmUpgrade linux-image-6.8.0-50-genericUpgrade linux-image-6.8.0-1020-azureUpgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-generic-64kUpgrade linux-image-genericUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-gcpUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-oracle-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-oem-24.04aUpgrade linux-image-oem-24.04Upgrade linux-image-azureUpgrade linux-image-gkeop-6.8Upgrade linux-image-awsUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1020-awsUpgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oem-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oracle | Dec 13, 2024 | Sep 18, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 18, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub