In the Linux kernel, the following vulnerability has been resolved:
x86/tdx: Fix data leak in mmio_read()
The mmio_read() function makes a TDVMCALL to retrieve MMIO data for an address from the VMM.
Sean noticed that mmio_read() unintentionally exposes the value of an initialized variable (val) on the stack to the VMM.
This variable is only needed as an output value. It did not need to be passed to the VMM in the first place.
Do not send the original value of *val to the VMM.
[ dhansen: clarify what 'val' is used for. ]
CVSS Details
- CVSS 3.1 Base Score: 3.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Oct 7, 2024 | Sep 18, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 18, 2024 |
| Suse | — | Upgrade kernel-azure-develUpgrade kernel-azure-extraUpgrade dtb-rockchipUpgrade ocfs2-kmp-defaultUpgrade kernel-azure-optionalUpgrade cluster-md-kmp-64kbUpgrade kernel-default-livepatch-develUpgrade kernel-azureUpgrade kernel-source-rtUpgrade kernel-default-baseUpgrade kernel-source-vanillaUpgrade gfs2-kmp-azureUpgrade kernel-default-base-rebuildUpgrade kernel-default-vdsoUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-rt-vdsoUpgrade kernel-rt-optionalUpgrade kernel-rt_debugUpgrade dtb-allwinnerUpgrade dtb-freescaleUpgrade dtb-lgUpgrade kselftests-kmp-azureUpgrade kernel-64kbUpgrade kselftests-kmp-64kbUpgrade dtb-nvidiaUpgrade kernel-rt_debug-develUpgrade kernel-sourceUpgrade ocfs2-kmp-64kbUpgrade dtb-amazonUpgrade kernel-rt-extraUpgrade dtb-appleUpgrade dtb-caviumUpgrade dtb-sprdUpgrade dtb-marvellUpgrade dtb-broadcomUpgrade kernel-obs-buildUpgrade kernel-rt_debug-livepatch-develUpgrade kernel-kvmsmall-vdsoUpgrade kernel-debug-vdsoUpgrade dtb-exynosUpgrade gfs2-kmp-defaultUpgrade kernel-64kb-extraUpgrade kernel-default-develUpgrade dlm-kmp-rtUpgrade dtb-alteraUpgrade kernel-docs-htmlUpgrade kernel-default-livepatchUpgrade kernel-rtUpgrade reiserfs-kmp-64kbUpgrade dlm-kmp-64kbUpgrade dtb-socionextUpgrade kernel-source-azureUpgrade dlm-kmp-azureUpgrade kernel-64kb-optionalUpgrade dtb-renesasUpgrade kernel-rt-livepatchUpgrade kernel-rt-develUpgrade kernel-debug-livepatch-develUpgrade dtb-xilinxUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-rtUpgrade reiserfs-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-64kb-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade kernel-zfcpdumpUpgrade kernel-syms-rtUpgrade kernel-rt-livepatch-develUpgrade kernel-macrosUpgrade kernel-develUpgrade kernel-default-optionalUpgrade kernel-debugUpgrade kernel-devel-rtUpgrade kernel-kvmsmall-develUpgrade gfs2-kmp-64kbUpgrade kernel-azure-vdsoUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-rtUpgrade kernel-kvmsmallUpgrade gfs2-kmp-rtUpgrade kernel-obs-qaUpgrade kernel-defaultUpgrade kernel-64kb-develUpgrade dtb-amdUpgrade kernel-syms-azureUpgrade kernel-debug-develUpgrade dtb-mediatekUpgrade dtb-qcomUpgrade dtb-armUpgrade cluster-md-kmp-rtUpgrade kernel-symsUpgrade dtb-apmUpgrade kernel-docsUpgrade dtb-hisiliconUpgrade kselftests-kmp-defaultUpgrade dtb-amlogicUpgrade kernel-rt_debug-vdsoUpgrade kernel-azure-livepatch-develUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade kernel-devel-azure | Dec 5, 2025 | Oct 8, 2024 |
| Ubuntu | — | Upgrade linux-image-6.8.0-1019-gcpUpgrade linux-image-awsUpgrade linux-image-6.8.0-1016-raspiUpgrade linux-image-6.8.0-1002-gkeopUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1020-azure-fdeUpgrade linux-image-gkeop-6.8Upgrade linux-image-lowlatency-hwe-24.04Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.8.0-1020-awsUpgrade linux-image-6.8.0-1015-gkeUpgrade linux-image-lowlatencyUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.8.0-1017-oracle-64kUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-50-lowlatencyUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1017-oracleUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-50-generic-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-lpaeUpgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1018-oemUpgrade linux-image-6.8.0-1019-nvidia-64kUpgrade linux-image-6.8.0-50-lowlatency-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1019-nvidia-lowlatencyUpgrade linux-image-oem-22.04dUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-50-genericUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-raspiUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-ibm-classicUpgrade linux-image-virtualUpgrade linux-image-oem-24.04Upgrade linux-image-azureUpgrade linux-image-6.8.0-1017-ibmUpgrade linux-image-ibmUpgrade linux-image-nvidia-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-oem-22.04bUpgrade linux-image-gcpUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-1019-nvidiaUpgrade linux-image-6.8.0-1019-nvidia-lowlatency-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1020-azureUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-kvmUpgrade linux-image-lowlatency-64k-hwe-24.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-gkeUpgrade linux-image-genericUpgrade linux-image-oem-22.04aUpgrade linux-image-virtual-hwe-22.04 | Dec 13, 2024 | Sep 18, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 18, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub