CVE-2024-25744: High severity IBM Security Verify Governance vulnerability
In the Linux kernel before 6.6.7, an untrusted VMM can trigger int80 syscall handling at any given point. This is related to arch/x86/coco/tdx/tdx.c and arch/x86/mm/memencryptamd.c.
Other sources
Linux Kernel could allow a local authenticated attacker to bypass security restrictions, caused by a flaw in rch/x86/coco/tdx/tdx.c and arch/x86/mm/memencryptamd.c. By sending a specially crafted request, an attacker could exploit this vulnerability to trigger int80 syscall handling at any given point.
— IBM
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2024-25744?
CVE-2024-25744 has been rated as a high severity vulnerability due to potential risks associated with untrusted VMM manipulating syscall handling.
How do I fix CVE-2024-25744?
To fix CVE-2024-25744, upgrade your Linux kernel to version 6.6.7 or apply the necessary patches available in earlier versions specified by your distribution.
Which Linux kernel versions are affected by CVE-2024-25744?
CVE-2024-25744 affects Linux kernel versions prior to 6.6.7.
What is the nature of the vulnerability in CVE-2024-25744?
The vulnerability in CVE-2024-25744 allows an untrusted VMM to trigger int80 syscall handling at arbitrary points during kernel execution.
What distributions are impacted by CVE-2024-25744?
CVE-2024-25744 impacts distributions using affected versions of the Linux kernel, particularly those from Red Hat and Debian.