In the Linux kernel, the following vulnerability has been resolved:
x86/tdx: Fix data leak in mmio_read()
The mmio_read() function makes a TDVMCALL to retrieve MMIO data for an address from the VMM.
Sean noticed that mmio_read() unintentionally exposes the value of an initialized variable (val) on the stack to the VMM.
This variable is only needed as an output value. It did not need to be passed to the VMM in the first place.
Do not send the original value of *val to the VMM.
[ dhansen: clarify what 'val' is used for. ]
CVSS Details
- CVSS 3.1 Base Score: 3.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux-6.1Upgrade linux | Oct 7, 2024 | Sep 18, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 18, 2024 |
| Suse | — | Upgrade kernel-debug-livepatch-develUpgrade dtb-apmUpgrade dlm-kmp-defaultUpgrade kernel-symsUpgrade kernel-rt-livepatchUpgrade kernel-rt_debug-vdsoUpgrade kernel-devel-azureUpgrade ocfs2-kmp-azureUpgrade dtb-renesasUpgrade dtb-mediatekUpgrade dtb-qcomUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-azureUpgrade kernel-syms-azureUpgrade dtb-armUpgrade kernel-64kb-livepatch-develUpgrade cluster-md-kmp-rtUpgrade kernel-docsUpgrade cluster-md-kmp-defaultUpgrade dtb-amdUpgrade dtb-hisiliconUpgrade kernel-64kb-optionalUpgrade kernel-devel-rtUpgrade kernel-macrosUpgrade kernel-rt-livepatch-develUpgrade kernel-syms-rtUpgrade kernel-develUpgrade kernel-kvmsmall-develUpgrade kernel-zfcpdumpUpgrade kernel-default-extraUpgrade reiserfs-kmp-rtUpgrade dtb-xilinxUpgrade reiserfs-kmp-azureUpgrade gfs2-kmp-64kbUpgrade cluster-md-kmp-azureUpgrade dtb-amlogicUpgrade kselftests-kmp-defaultUpgrade kernel-debugUpgrade kernel-obs-qaUpgrade kernel-kvmsmallUpgrade kernel-azure-livepatch-develUpgrade kselftests-kmp-rtUpgrade kernel-defaultUpgrade ocfs2-kmp-rtUpgrade kernel-default-optionalUpgrade kernel-rt-develUpgrade gfs2-kmp-rtUpgrade kernel-64kb-develUpgrade kernel-debug-develUpgrade kernel-azure-vdsoUpgrade kernel-rt-vdsoUpgrade kernel-rt-extraUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-vdsoUpgrade kernel-default-base-rebuildUpgrade dtb-rockchipUpgrade dtb-lgUpgrade dtb-freescaleUpgrade kernel-default-livepatch-develUpgrade kernel-64kbUpgrade ocfs2-kmp-defaultUpgrade kernel-azureUpgrade cluster-md-kmp-64kbUpgrade kernel-default-livepatchUpgrade kernel-debug-vdsoUpgrade dtb-socionextUpgrade dlm-kmp-64kbUpgrade kernel-64kb-extraUpgrade dtb-exynosUpgrade kernel-default-baseUpgrade dtb-marvellUpgrade kernel-source-vanillaUpgrade kselftests-kmp-azureUpgrade kernel-rt_debugUpgrade gfs2-kmp-defaultUpgrade kernel-docs-htmlUpgrade dtb-alteraUpgrade dlm-kmp-rtUpgrade kernel-rt_debug-develUpgrade kernel-sourceUpgrade kernel-obs-buildUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azure-develUpgrade kernel-default-develUpgrade dtb-broadcomUpgrade reiserfs-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-rtUpgrade kselftests-kmp-64kbUpgrade kernel-source-rtUpgrade kernel-rt-optionalUpgrade kernel-azure-extraUpgrade gfs2-kmp-azureUpgrade dtb-nvidiaUpgrade dtb-allwinnerUpgrade dtb-caviumUpgrade dtb-appleUpgrade dtb-amazonUpgrade ocfs2-kmp-64kbUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-sprdUpgrade kernel-azure-optional | Dec 5, 2025 | Oct 8, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-lowlatencyUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-lpaeUpgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-6.8.0-1018-oemUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-nvidia-6.8Upgrade linux-image-gkeop-6.8Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-oracleUpgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-6.8.0-1020-awsUpgrade linux-image-awsUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-64kUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oem-24.04Upgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-oem-22.04dUpgrade linux-image-azureUpgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-6.8.0-50-genericUpgrade linux-image-ibmUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-raspiUpgrade linux-image-gcpUpgrade linux-image-oem-22.04cUpgrade linux-image-nvidiaUpgrade linux-image-ibm-classicUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-oem-22.04aUpgrade linux-image-oracle-64kUpgrade linux-image-genericUpgrade linux-image-oem-22.04bUpgrade linux-image-virtualUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-gkeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-24.04aUpgrade linux-image-kvmUpgrade linux-image-6.8.0-1020-azure | Dec 13, 2024 | Sep 18, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 18, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub