In the Linux kernel, the following vulnerability has been resolved:
x86/tdx: Fix "in-kernel MMIO" check
TDX only supports kernel-initiated MMIO operations. The handle_mmio() function checks if the #VE exception occurred in the kernel and rejects the operation if it did not.
However, userspace can deceive the kernel into performing MMIO on its behalf. For example, if userspace can point a syscall to an MMIO address, syscall does get_user() or put_user() on it, triggering MMIO #VE. The kernel will treat the #VE as in-kernel MMIO.
Ensure that the target MMIO address is within the kernel before decoding instruction.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-64k-debug-develUpgrade kernel-rt-64k-develUpgrade kernel-64k-debugUpgrade kernel-cross-headersUpgrade kernel-tools-libsUpgrade kernel-rtUpgrade kernel-64k-modulesUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-debug-coreUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-64k-coreUpgrade kernel-rt-debugUpgrade kernel-rt-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-rt-64k-debug-develUpgrade kernel-rt-modules-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-develUpgrade kernel-rt-64k-modulesUpgrade kernel-debug-modulesUpgrade kernel-64k-modules-extraUpgrade kernel-rt-64k-debug-coreUpgrade kernel-toolsUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-64kUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-64k-modules-coreUpgrade kernel-develUpgrade kernel-uki-virt-addonsUpgrade kernel-debug-modules-extraUpgrade kernel-64k-debug-modules-coreUpgrade kernelUpgrade rvUpgrade kernel-tools-libs-develUpgrade kernel-64kUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-debug-uki-virtUpgrade kernel-64k-coreUpgrade kernel-modules-coreUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-develUpgrade rtlaUpgrade kernel-rt-coreUpgrade kernel-debugUpgrade libperfUpgrade kernel-rt-debug-modulesUpgrade kernel-64k-modules-coreUpgrade kernel-modulesUpgrade kernel-zfcpdumpUpgrade kernel-rt-64k-modules-extraUpgrade kernel-debug-coreUpgrade kernel-debug-modules-coreUpgrade kernel-debug-develUpgrade kernel-coreUpgrade perfUpgrade kernel-modules-extraUpgrade kernel-headersUpgrade kernel-docUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-rt-64k-debugUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-develUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-uki-virtUpgrade kernel-64k-debug-modules-extraUpgrade kernel-devel-matchedUpgrade kernel-rt-debug-modules-extra | Nov 20, 2025 | Nov 11, 2025 |
| Debian | — | Upgrade linuxUpgrade linux-6.1 | Nov 11, 2024 | Oct 21, 2024 |
| Oracle_linux | — | Upgrade kernel | Nov 28, 2025 | Oct 21, 2024 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Jul 9, 2025 | Oct 21, 2024 |
| Rocky_linux | — | Upgrade kernel-rt-debug-debuginfoUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debug-devel-matchedUpgrade kernel-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-rt-develUpgrade kernel-rt-modules-coreUpgrade kernel-uki-virt-addonsUpgrade kernelUpgrade kernel-rtUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-zfcpdump-modules-coreUpgrade libperf-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-devel-matchedUpgrade kernel-debuginfo-common-s390xUpgrade kernel-rt-debug-coreUpgrade rvUpgrade python3-perfUpgrade kernel-tools-debuginfoUpgrade kernel-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-rt-coreUpgrade kernel-debugUpgrade kernel-rt-debug-develUpgrade kernel-modules-coreUpgrade kernel-debug-uki-virtUpgrade kernel-debug-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-modules-coreUpgrade perf-debuginfoUpgrade perfUpgrade kernel-uki-virtUpgrade kernel-tools-libsUpgrade kernel-rt-debugUpgrade kernel-rt-modulesUpgrade kernel-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-debuginfoUpgrade kernel-develUpgrade kernel-zfcpdump-develUpgrade kernel-coreUpgrade python3-perf-debuginfoUpgrade libperfUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debug-develUpgrade rtlaUpgrade kernel-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdump | Feb 5, 2026 | Nov 21, 2025 |
| Ubuntu | — | Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-54-lowlatencyUpgrade linux-image-aws-lts-24.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-6.8.0-1019-gkeUpgrade linux-image-nvidia-6.8Upgrade linux-image-kvmUpgrade linux-image-oracleUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-6.8.0-57-genericUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-6.8.0-1022-nvidia-64kUpgrade linux-image-realtimeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1025-azureUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-oem-24.04Upgrade linux-image-awsUpgrade linux-image-oem-24.04aUpgrade linux-image-oem-24.04bUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-6.8.0-1020-oracle-64kUpgrade linux-image-6.8.0-1022-ibmUpgrade linux-image-6.8.0-1024-oemUpgrade linux-image-6.8.0-57-generic-64kUpgrade linux-image-virtualUpgrade linux-image-oem-22.04dUpgrade linux-image-6.8.0-1020-oracleUpgrade linux-image-oracle-64kUpgrade linux-image-gkeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1022-nvidia-lowlatencyUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-gcp-64kUpgrade linux-image-6.8.0-1019-raspiUpgrade linux-image-raspiUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-54-generic-64kUpgrade linux-image-6.8.0-1022-nvidia-lowlatency-64kUpgrade linux-image-oem-22.04Upgrade linux-image-6.11.0-18-genericUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-1025-azure-fdeUpgrade linux-image-6.8.0-54-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1006-gkeopUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-nvidiaUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-oem-22.04aUpgrade linux-image-ibmUpgrade linux-image-azureUpgrade linux-image-6.8.0-1024-gcp-64kUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-gkeop-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-generic-64kUpgrade linux-image-azure-fdeUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-lowlatencyUpgrade linux-image-ibm-classicUpgrade linux-image-6.8.0-1023-awsUpgrade linux-image-6.8.0-54-genericUpgrade linux-image-6.8.0-1024-gcpUpgrade linux-image-genericUpgrade linux-image-gkeopUpgrade linux-image-azure-lts-24.04Upgrade linux-image-oem-22.04cUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1022-nvidia | Feb 20, 2025 | Oct 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Oct 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub