by Kastro
Paper/Archive/CVE-2024-57793

CVE-2024-57793

Linux Linux — virt: tdx-guest: Just leak decrypted memory on unrecoverable errors

EPSS 0.2%CVSS 9.3
critical.is priorityof 100
30
CVSS 9.3 (CNA)9.3 / 10 × 3027.9Not in CISA KEV+300.0EPSS percentile 10.2.102 × 202.0No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

In the Linux kernel, the following vulnerability has been resolved: virt: tdx-guest: Just leak decrypted memory on unrecoverable errors In CoCo VMs it is possible for the untrusted host to cause set_memory_decrypted() to fail such that an error is returned and the resulting memory is shared. Callers need to take care to handle these errors to avoid returning decrypted (shared) memory to the page allocator, which could lead to functional or security issues. Leak the decrypted memory when set_memory_decrypted() fails, and don't need to print an error since set_memory_decrypted() will call WARN_ONCE().

Affected

ProductAffectedFixed inSource
Linuxf4738f56d1dc62aaba69b33702a5ab098f1b8c63 – < 1429ae7b7d4759a1e362456b8911c701bae655b41429ae7b7d4759a1e362456b8911c701bae655b4CNA
Linuxf4738f56d1dc62aaba69b33702a5ab098f1b8c63 – < 27834971f616c5e154423c578fa95e0444444ce127834971f616c5e154423c578fa95e0444444ce1CNA
Linux6.76.12.8CNA

Scores by source

Linux (CNA)9.3CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refgit.kernel.org/stable/c/1429ae7b7d4759a1e362456b8911c701bae655b4refgit.kernel.org/stable/c/27834971f616c5e154423c578fa95e0444444ce1