Log in Start free

Vulnerability · Published May 19, 2024 · Assigned by Linux

CVE-2024-35939dma-direct: Leak pages on dma_set_decrypted() failure

Critical 9.3

In plain English

A critical-severity security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 13% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)9.3Critical
Exploit odds (30 days)0.2%top 87.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: dma-direct: Leak pages on dma_set_decrypted() failure On TDX it is possible for the untrusted host to cause set_memory_encrypted() or set_memory_decrypted() to fail such that an error is returned and the resulting memory is shared. Callers need to take care to handle these errors to avoid returning decrypted (shared) memory to the page allocator, which could lead to functional or security issues. DMA could free decrypted/shared pages if dma_set_decrypted() fails. This should be a rare case. Just leak the pages in this case instead of freeing them.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:8bpftool4.18.0-553.27.1.el8_10ALSA-2024:8856
AlmaLinux:8kernel4.18.0-553.27.1.el8_10ALSA-2024:8856
AlmaLinux:8kernel-abi-stablelists4.18.0-553.27.1.el8_10ALSA-2024:8856
AlmaLinux:8kernel-core4.18.0-553.27.1.el8_10ALSA-2024:8856
AlmaLinux:8kernel-cross-headers4.18.0-553.27.1.el8_10ALSA-2024:8856
AlmaLinux:8kernel-debug4.18.0-553.27.1.el8_10ALSA-2024:8856
AlmaLinux:8kernel-debug-core4.18.0-553.27.1.el8_10ALSA-2024:8856
AlmaLinux:8kernel-debug-devel4.18.0-553.27.1.el8_10ALSA-2024:8856
AlmaLinux:8kernel-debug-modules4.18.0-553.27.1.el8_10ALSA-2024:8856
AlmaLinux:8kernel-debug-modules-extra4.18.0-553.27.1.el8_10ALSA-2024:8856
AlmaLinux:8kernel-devel4.18.0-553.27.1.el8_10ALSA-2024:8856
AlmaLinux:8kernel-doc4.18.0-553.27.1.el8_10ALSA-2024:8856
AlmaLinux:8kernel-headers4.18.0-553.27.1.el8_10ALSA-2024:8856
AlmaLinux:8kernel-modules4.18.0-553.27.1.el8_10ALSA-2024:8856
AlmaLinux:8kernel-modules-extra4.18.0-553.27.1.el8_10ALSA-2024:8856
AlmaLinux:8kernel-rt4.18.0-553.27.1.rt7.368.el8_10ALSA-2024:8870
AlmaLinux:8kernel-rt-core4.18.0-553.27.1.rt7.368.el8_10ALSA-2024:8870
AlmaLinux:8kernel-rt-debug4.18.0-553.27.1.rt7.368.el8_10ALSA-2024:8870
AlmaLinux:8kernel-rt-debug-core4.18.0-553.27.1.rt7.368.el8_10ALSA-2024:8870
AlmaLinux:8kernel-rt-debug-devel4.18.0-553.27.1.rt7.368.el8_10ALSA-2024:8870
AlmaLinux:8kernel-rt-debug-modules4.18.0-553.27.1.rt7.368.el8_10ALSA-2024:8870
AlmaLinux:8kernel-rt-debug-modules-extra4.18.0-553.27.1.rt7.368.el8_10ALSA-2024:8870
AlmaLinux:8kernel-rt-devel4.18.0-553.27.1.rt7.368.el8_10ALSA-2024:8870
AlmaLinux:8kernel-rt-modules4.18.0-553.27.1.rt7.368.el8_10ALSA-2024:8870
AlmaLinux:8kernel-rt-modules-extra4.18.0-553.27.1.rt7.368.el8_10ALSA-2024:8870
AlmaLinux:8kernel-tools4.18.0-553.27.1.el8_10ALSA-2024:8856
AlmaLinux:8kernel-tools-libs4.18.0-553.27.1.el8_10ALSA-2024:8856
AlmaLinux:8kernel-tools-libs-devel4.18.0-553.27.1.el8_10ALSA-2024:8856
AlmaLinux:8kernel-zfcpdump4.18.0-553.27.1.el8_10ALSA-2024:8856
AlmaLinux:8kernel-zfcpdump-core4.18.0-553.27.1.el8_10ALSA-2024:8856
AlmaLinux:8kernel-zfcpdump-devel4.18.0-553.27.1.el8_10ALSA-2024:8856
AlmaLinux:8kernel-zfcpdump-modules4.18.0-553.27.1.el8_10ALSA-2024:8856
AlmaLinux:8kernel-zfcpdump-modules-extra4.18.0-553.27.1.el8_10ALSA-2024:8856
AlmaLinux:8perf4.18.0-553.27.1.el8_10ALSA-2024:8856
AlmaLinux:8python3-perf4.18.0-553.27.1.el8_10ALSA-2024:8856
Debian:12linux6.1.90-1DEBIAN-CVE-2024-35939
Debian:13linux6.8.9-1DEBIAN-CVE-2024-35939
Debian:14linux6.8.9-1DEBIAN-CVE-2024-35939
Rocky Linux:8kernel0:4.18.0-553.27.1.el8_10RLSA-2024:8856
Rocky Linux:8kernel-rt0:4.18.0-553.27.1.rt7.368.el8_10RLSA-2024:8870
Ubuntu:22.04:LTSlinuxno fix listedUBUNTU-CVE-2024-35939
Ubuntu:24.04:LTSlinux6.8.0-38.38UBUNTU-CVE-2024-35939
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2024-35939
Ubuntu:22.04:LTSlinux-awsno fix listedUBUNTU-CVE-2024-35939
Ubuntu:24.04:LTSlinux-aws6.8.0-1011.12UBUNTU-CVE-2024-35939
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2024-35939
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2024-35939
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2024-35939
Ubuntu:22.04:LTSlinux-aws-6.86.8.0-1011.12~22.04.1UBUNTU-CVE-2024-35939
Ubuntu:22.04:LTSlinux-azureno fix listedUBUNTU-CVE-2024-35939
Ubuntu:24.04:LTSlinux-azure6.8.0-1010.10UBUNTU-CVE-2024-35939
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2024-35939
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2024-35939
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2024-35939
Ubuntu:22.04:LTSlinux-azure-6.86.8.0-1010.10~22.04.1UBUNTU-CVE-2024-35939
Ubuntu:22.04:LTSlinux-azure-fdeno fix listedUBUNTU-CVE-2024-35939
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2024-35939
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2024-35939
Ubuntu:22.04:LTSlinux-gcpno fix listedUBUNTU-CVE-2024-35939
Ubuntu:24.04:LTSlinux-gcp6.8.0-1010.11UBUNTU-CVE-2024-35939
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2024-35939
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2024-35939
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2024-35939
Ubuntu:22.04:LTSlinux-gkeno fix listedUBUNTU-CVE-2024-35939
Ubuntu:24.04:LTSlinux-gke6.8.0-1006.9UBUNTU-CVE-2024-35939
Ubuntu:22.04:LTSlinux-gkeopno fix listedUBUNTU-CVE-2024-35939
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2024-35939
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2024-35939
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2024-35939
Ubuntu:22.04:LTSlinux-ibmno fix listedUBUNTU-CVE-2024-35939
Ubuntu:24.04:LTSlinux-ibm6.8.0-1008.8UBUNTU-CVE-2024-35939
Ubuntu:24.04:LTSlinux-intel6.8.0-1007.14UBUNTU-CVE-2024-35939
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2024-35939
Ubuntu:22.04:LTSlinux-intel-iotgno fix listedUBUNTU-CVE-2024-35939
Ubuntu:22.04:LTSlinux-kvmno fix listedUBUNTU-CVE-2024-35939
Ubuntu:22.04:LTSlinux-lowlatencyno fix listedUBUNTU-CVE-2024-35939
Ubuntu:24.04:LTSlinux-lowlatency6.8.0-38.38.1UBUNTU-CVE-2024-35939
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2024-35939
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2024-35939
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2024-35939
Ubuntu:22.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2024-35939
Ubuntu:24.04:LTSlinux-nvidia6.8.0-1009.9UBUNTU-CVE-2024-35939
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2024-35939
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2024-35939
Ubuntu:22.04:LTSlinux-nvidia-6.86.8.0-1009.9~22.04.1UBUNTU-CVE-2024-35939
Ubuntu:22.04:LTSlinux-nvidia-tegrano fix listedUBUNTU-CVE-2024-35939
Ubuntu:22.04:LTSlinux-nvidia-tegra-igxno fix listedUBUNTU-CVE-2024-35939
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2024-35939
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2024-35939
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2024-35939
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2024-35939
Ubuntu:24.04:LTSlinux-oem-6.86.8.0-1008.8UBUNTU-CVE-2024-35939
Ubuntu:22.04:LTSlinux-oracleno fix listedUBUNTU-CVE-2024-35939
Ubuntu:24.04:LTSlinux-oracle6.8.0-1008.8UBUNTU-CVE-2024-35939
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2024-35939
Ubuntu:22.04:LTSlinux-oracle-6.86.8.0-1008.8~22.04.1UBUNTU-CVE-2024-35939
Ubuntu:22.04:LTSlinux-raspino fix listedUBUNTU-CVE-2024-35939
Ubuntu:24.04:LTSlinux-raspi6.8.0-1007.7UBUNTU-CVE-2024-35939
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2024-35939
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2024-35939
Ubuntu:24.04:LTSlinux-riscv6.8.0-38.38.1UBUNTU-CVE-2024-35939
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2024-35939
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2024-35939
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2024-35939
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2024-35939
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2024-35939
Ubuntu:22.04:LTSlinux-xilinx-zynqmpno fix listedUBUNTU-CVE-2024-35939

Affected products (as reported)

VendorProductVersions
Linux Linux 56fccf21d1961a06e2a0c96ce446ebf036651062 – before 4e0cfb25d49da2e6261ad582f58ffa5b5dd8c8e956fccf21d1961a06e2a0c96ce446ebf036651062 – before 4031b72ca747a1e6e9ae4fa729e765b43363d66a56fccf21d1961a06e2a0c96ce446ebf036651062 – before b57326c96b7bc7638aa8c44e12afa2defe0c934c56fccf21d1961a06e2a0c96ce446ebf036651062 – before b9fa16949d18e06bdf728a560f5c8af56d2bdcaf91c7b0407ca6a62c095d265f76926b67bf66c0265.7.7 – before 5.8
Linux Linux 5.8

References