Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2024-25744HistoryFeb 12, 2024 - 5:15 a.m.
CVE-2024-25744
2024-02-1205:15:07
Debian Security Bug Tracker
security-tracker.debian.org
18
linux kernel
int80
syscall
vulnerability
vmm
untrusted
mem_encrypt_amd
CVSS3
8.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
AI Score
6.5
Confidence
Low
EPSS
0
Percentile
9.0%
In the Linux kernel before 6.6.7, an untrusted VMM can trigger int80 syscall handling at any given point. This is related to arch/x86/coco/tdx/tdx.c and arch/x86/mm/mem_encrypt_amd.c.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | linux | < 6.1.69-1 | linux_6.1.69-1_all.deb |
| Debian | 11 | all | linux | < 5.10.223-1 | linux_5.10.223-1_all.deb |
| Debian | 999 | all | linux | < 6.6.8-1 | linux_6.6.8-1_all.deb |
| Debian | 13 | all | linux | < 6.6.8-1 | linux_6.6.8-1_all.deb |
Related
cve
cve
CVE-2024-25744
2024-02-12 05:15:07
nvd
nvd
CVE-2024-25744
2024-02-12 05:15:07
cvelist
cvelist
CVE-2024-25744
2024-02-12 00:00:00
prion
prion
Code injection
2024-02-12 05:15:00
redhatcve
redhatcve
CVE-2024-25744
2024-02-14 21:32:42
ubuntucve
ubuntucve
CVE-2024-25744
2024-02-12 00:00:00
CVE-2024-25743
2024-05-15 00:00:00
nessus
nessus
RHEL 9 : kernel (RHSA-2024:2845)
2024-05-15 00:00:00
RHEL 9 : kernel-rt (RHSA-2024:2846)
2024-05-15 00:00:00
RHEL 8 : kernel (RHSA-2024:2621)
2024-04-30 00:00:00
redhat
redhat
(RHSA-2024:2845) Moderate: kernel security and bug fix update
2024-05-15 00:13:23
(RHSA-2024:2846) Moderate: kernel-rt security and bug fix update
2024-05-15 00:13:31
(RHSA-2024:2621) Important: kernel security, bug fix, and enhancement update
2024-04-30 16:31:58
amd
amd
Disrupting AMD SEV-SNP on Linux® With Interrupts
2024-04-05 00:00:00
ubuntu
ubuntu
Linux kernel vulnerabilities
2024-03-06 00:00:00
Linux kernel vulnerabilities
2024-03-08 00:00:00
Linux kernel (AWS) vulnerabilities
2024-03-19 00:00:00
osv
osv
linux-aws, linux-aws-6.5 vulnerabilities
2024-03-19 14:49:49
linux-azure, linux-azure-6.5, linux-hwe-6.5 vulnerabilities
2024-03-08 01:01:36
openvas
openvas
Ubuntu: Security Advisory (USN-6680-3)
2024-03-21 00:00:00
Ubuntu: Security Advisory (USN-6680-2)
2024-03-11 00:00:00
Ubuntu: Security Advisory (USN-6680-1)
2024-03-07 00:00:00
almalinux
almalinux
Moderate: kernel-rt security and bug fix update
2024-06-05 00:00:00
Moderate: kernel update
2024-06-05 00:00:00
rocky
rocky
kernel-rt security and bug fix update
2024-06-14 13:59:36
kernel update
2024-06-14 13:59:16
oraclelinux
oraclelinux
kernel update
2024-06-05 00:00:00
ibm
ibm
Security Bulletin: IBM QRadar SIEM contains multiple vulnerabilities
2024-07-31 12:54:26
Security Bulletin: Multiple Vulnerabilities in IBM CloudPak for AIOps
2024-06-26 16:06:34
CVSS3
8.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
AI Score
6.5
Confidence
Low
EPSS
0
Percentile
9.0%
Related for DEBIANCVE:CVE-2024-25744