CVE-2024-35939

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-35939

7.1 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.2

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

I

n the Linux kernel, the following vulnerability has been resolved: dma-direct: Leak pages on dma_set_decrypted() failure On TDX it is possible for the untrusted host to cause set_memory_encrypted() or set_memory_decrypted() to fail such that an error is returned and the resulting memory is shared. Callers need to take care to handle these errors to avoid returning decrypted (shared) memory to the page allocator, which could lead to functional or security issues. DMA could free decrypted/shared pages if dma_set_decrypted() fails. This should be a rare case. Just leak the pages in this case instead of freeing them.

References
Link Resource
https://git.kernel.org/stable/c/4031b72ca747a1e6e9ae4fa729e765b43363d66a Patch
https://git.kernel.org/stable/c/4e0cfb25d49da2e6261ad582f58ffa5b5dd8c8e9 Patch
https://git.kernel.org/stable/c/b57326c96b7bc7638aa8c44e12afa2defe0c934c Patch
https://git.kernel.org/stable/c/b9fa16949d18e06bdf728a560f5c8af56d2bdcaf Patch
https://git.kernel.org/stable/c/4031b72ca747a1e6e9ae4fa729e765b43363d66a Patch
https://git.kernel.org/stable/c/4e0cfb25d49da2e6261ad582f58ffa5b5dd8c8e9 Patch
https://git.kernel.org/stable/c/b57326c96b7bc7638aa8c44e12afa2defe0c934c Patch
https://git.kernel.org/stable/c/b9fa16949d18e06bdf728a560f5c8af56d2bdcaf Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
History

24 Sep 2025, 20:13

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.1
CPE cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
CWE NVD-CWE-noinfo
References () https://git.kernel.org/stable/c/4031b72ca747a1e6e9ae4fa729e765b43363d66a - () https://git.kernel.org/stable/c/4031b72ca747a1e6e9ae4fa729e765b43363d66a - Patch
References () https://git.kernel.org/stable/c/4e0cfb25d49da2e6261ad582f58ffa5b5dd8c8e9 - () https://git.kernel.org/stable/c/4e0cfb25d49da2e6261ad582f58ffa5b5dd8c8e9 - Patch
References () https://git.kernel.org/stable/c/b57326c96b7bc7638aa8c44e12afa2defe0c934c - () https://git.kernel.org/stable/c/b57326c96b7bc7638aa8c44e12afa2defe0c934c - Patch
References () https://git.kernel.org/stable/c/b9fa16949d18e06bdf728a560f5c8af56d2bdcaf - () https://git.kernel.org/stable/c/b9fa16949d18e06bdf728a560f5c8af56d2bdcaf - Patch
First Time Linux
Linux linux Kernel

21 Nov 2024, 09:21

Type Values Removed Values Added
References () https://git.kernel.org/stable/c/4031b72ca747a1e6e9ae4fa729e765b43363d66a - () https://git.kernel.org/stable/c/4031b72ca747a1e6e9ae4fa729e765b43363d66a -
References () https://git.kernel.org/stable/c/4e0cfb25d49da2e6261ad582f58ffa5b5dd8c8e9 - () https://git.kernel.org/stable/c/4e0cfb25d49da2e6261ad582f58ffa5b5dd8c8e9 -
References () https://git.kernel.org/stable/c/b57326c96b7bc7638aa8c44e12afa2defe0c934c - () https://git.kernel.org/stable/c/b57326c96b7bc7638aa8c44e12afa2defe0c934c -
References () https://git.kernel.org/stable/c/b9fa16949d18e06bdf728a560f5c8af56d2bdcaf - () https://git.kernel.org/stable/c/b9fa16949d18e06bdf728a560f5c8af56d2bdcaf -
Summary
  • (es) En el kernel de Linux, se ha resuelto la siguiente vulnerabilidad: dma-direct: páginas filtradas en el fallo de dma_set_decrypted() En TDX es posible que el host que no es de confianza provoque que set_memory_encrypted() o set_memory_decrypted() falle de modo que se devuelva un error y la memoria resultante se comparte. Las personas que llaman deben tener cuidado al manejar estos errores para evitar devolver memoria descifrada (compartida) al asignador de páginas, lo que podría provocar problemas funcionales o de seguridad. DMA podría liberar páginas descifradas/compartidas si dma_set_decrypted() falla. Este debería ser un caso raro. En este caso, simplemente filtre las páginas en lugar de liberarlas.

19 May 2024, 11:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-05-19 11:15

Updated : 2025-09-24 20:13

NVD link : CVE-2024-35939

Mitre link : CVE-2024-35939

CVE.ORG link : CVE-2024-35939

JSON object : View

Products Affected

linux

CWE
NVD-CWE-noinfo