The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In the Linux kernel, the following vulnerability has been resolved:
x86/tdx: Fix "in-kernel MMIO" check
TDX only supports kernel-initiated MMIO operations. The handle_mmio() function checks if the #VE exception occurred in the kernel and rejects the operation if it did not.
However, userspace can deceive the kernel into performing MMIO on its behalf. For example, if userspace can point a syscall to an MMIO address, syscall does get_user() or put_user() on it, triggering MMIO #VE. The kernel will treat the #VE as in-kernel MMIO.
Ensure that the target MMIO address is within the kernel before decoding instruction.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-64k-debug-coreUpgrade kernel-rt-64k-develUpgrade kernel-tools-libs-develUpgrade kernel-64k-debug-modulesUpgrade kernel-64k-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-rt-64k-modulesUpgrade kernel-rt-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-modulesUpgrade kernel-toolsUpgrade kernel-rtUpgrade kernel-64k-devel-matchedUpgrade kernel-64kUpgrade kernel-develUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-modulesUpgrade kernel-rt-modules-extraUpgrade rvUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-debug-coreUpgrade kernelUpgrade kernel-debug-modules-extraUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-64kUpgrade kernel-tools-libsUpgrade kernel-rt-modules-coreUpgrade kernel-rt-64k-modules-coreUpgrade kernel-rt-debugUpgrade kernel-rt-debug-coreUpgrade kernel-64k-debug-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-64k-coreUpgrade kernel-rt-64k-debug-develUpgrade kernel-uki-virt-addonsUpgrade kernel-64k-debugUpgrade kernel-cross-headersUpgrade libperfUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-modules-coreUpgrade kernel-debug-coreUpgrade kernel-modules-extraUpgrade kernel-debug-develUpgrade kernel-headersUpgrade python3-perfUpgrade kernel-rt-64k-debugUpgrade perfUpgrade kernel-debug-devel-matchedUpgrade rtlaUpgrade kernel-modules-coreUpgrade kernel-64k-develUpgrade kernel-uki-virtUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-debug-uki-virtUpgrade kernel-debugUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-rt-64k-modules-extraUpgrade kernel-64k-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-develUpgrade kernel-modulesUpgrade kernel-coreUpgrade kernel-abi-stablelistsUpgrade kernel-docUpgrade kernel-64k-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-64k-debug-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-zfcpdump | Nov 20, 2025 | Nov 11, 2025 |
| Debian | — | Upgrade linux-6.1Upgrade linux | Nov 11, 2024 | Oct 21, 2024 |
| Oracle_linux | — | Upgrade kernel | Nov 28, 2025 | Oct 21, 2024 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Jul 9, 2025 | Oct 21, 2024 |
| Rocky_linux | — | Upgrade kernel-rtUpgrade libperf-debuginfoUpgrade kernel-rt-develUpgrade python3-perfUpgrade kernel-uki-virt-addonsUpgrade kernel-devel-matchedUpgrade kernel-rt-modules-coreUpgrade kernelUpgrade kernel-debug-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-debuginfo-common-s390xUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-modules-extraUpgrade kernel-toolsUpgrade rvUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-debug-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdumpUpgrade kernel-tools-libsUpgrade kernel-develUpgrade kernel-rt-debugUpgrade perfUpgrade kernel-debug-coreUpgrade kernel-rt-coreUpgrade kernel-modulesUpgrade kernel-tools-debuginfoUpgrade kernel-debug-debuginfoUpgrade perf-debuginfoUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-develUpgrade kernel-modules-extraUpgrade kernel-modules-coreUpgrade kernel-debug-uki-virtUpgrade kernel-debugUpgrade kernel-rt-modulesUpgrade kernel-debuginfoUpgrade libperfUpgrade python3-perf-debuginfoUpgrade kernel-rt-debuginfoUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debug-develUpgrade rtlaUpgrade kernel-uki-virtUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-coreUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debug-modules-extra | Feb 5, 2026 | Nov 21, 2025 |
| Ubuntu | — | Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-6.11.0-1005-realtimeUpgrade linux-image-6.8.0-1006-gkeopUpgrade linux-image-lowlatency-64kUpgrade linux-image-6.8.0-1025-azure-fdeUpgrade linux-image-6.11.0-1009-azureUpgrade linux-image-oem-22.04cUpgrade linux-image-raspiUpgrade linux-image-generic-lpaeUpgrade linux-image-6.11.0-18-genericUpgrade linux-image-6.8.0-1019-raspiUpgrade linux-image-nvidiaUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1022-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-54-lowlatency-64kUpgrade linux-image-generic-64kUpgrade linux-image-6.11.0-1015-oemUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.11.0-1010-lowlatencyUpgrade linux-image-oem-22.04aUpgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.11.0-1011-oracleUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-1024-gcp-64kUpgrade linux-image-6.8.0-54-genericUpgrade linux-image-6.11.0-1009-azure-fdeUpgrade linux-image-6.8.0-1023-awsUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-ibmUpgrade linux-image-azureUpgrade linux-image-nvidia-64kUpgrade linux-image-genericUpgrade linux-image-azure-lts-24.04Upgrade linux-image-lowlatencyUpgrade linux-image-6.8.0-1024-gcpUpgrade linux-image-6.11.0-1011-oracle-64kUpgrade linux-image-6.11.0-1009-awsUpgrade linux-image-6.11.0-1008-raspiUpgrade linux-image-oem-22.04bUpgrade linux-image-6.8.0-1022-nvidiaUpgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-nvidia-lowlatencyUpgrade linux-image-ibm-classicUpgrade linux-image-gkeopUpgrade linux-image-6.8.0-54-generic-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gcp-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-57-generic-64kUpgrade linux-image-6.11.0-1009-gcpUpgrade linux-image-6.8.0-1019-gkeUpgrade linux-image-6.11.0-18-generic-64kUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-1024-oemUpgrade linux-image-6.8.0-1022-ibmUpgrade linux-image-6.8.0-1022-nvidia-64kUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-6.8.0-1020-oracle-64kUpgrade linux-image-oem-22.04dUpgrade linux-image-oem-24.04Upgrade linux-image-oem-24.04bUpgrade linux-image-realtimeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.8.0-1025-azureUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-virtualUpgrade linux-image-oracleUpgrade linux-image-oem-24.04aUpgrade linux-image-gkeUpgrade linux-image-6.8.0-57-genericUpgrade linux-image-6.11.0-1010-lowlatency-64kUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1020-oracleUpgrade linux-image-oracle-64kUpgrade linux-image-6.8.0-1022-nvidia-lowlatencyUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-awsUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-aws-lts-24.04Upgrade linux-image-gcpUpgrade linux-image-kvmUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-6.8.0-54-lowlatency | Feb 20, 2025 | Oct 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 13, 2025 | Oct 21, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub