PT-2024-21123 · Linux+10 · Linux Kernel+10
Andrin Bertschi
+4
·
Published
2024-02-11
·
Updated
2025-10-13
·
CVE-2024-25744
CVSS v3.1
8.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.6.7
Description
An untrusted VMM can trigger int80 syscall handling at any given point in the Linux kernel. This issue is related to the files arch/x86/coco/tdx/tdx.c and arch/x86/mm/mem encrypt amd.c, specifically affecting 32-bit emulation for TDX and SEV. The vulnerability opens the guest OS to manipulation from the VMM side.
Recommendations
For Linux kernel versions prior to 6.6.7, update to version 6.6.7 or later to resolve the issue. As a temporary workaround, consider restricting access to the
int80 syscall handling mechanism until a patch is available. Additionally, restricting the use of 32-bit emulation for TDX and SEV may help minimize the risk of exploitation.Fix
DoS
Protection Mechanism Failure
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Almalinux
Astra Linux
Centos
Linuxmint
Linux Kernel
Red Hat
Red Os
Rocky Linux
Suse
Ubuntu