PT-2024-7306 · Intel · Intel Tdx Module

Name of the Vulnerable Software and Affected Versions: Intel TDX Module firmware versions prior to 1.5.06 Description: The issue is related to an improper check for unusual or exceptional conditions in the Intel TDX Module firmware. This may allow a privileged user to potentially enable informati...

Intel TDX Module firmware 代码问题漏洞

Intel TDX Module firmware is a firmware from Intel Corporation USA. A code issue vulnerability exists in Intel TDX Module firmware version 1.5.06, which arises from improper exception or exception checking in the firmware and allows a privileged user to disclose information via local access...

CVE-2024-46794

In the Linux kernel, the following vulnerability has been resolved: x86/tdx: Fix data leak in mmioread The mmioread function makes a TDVMCALL to retrieve MMIO data for an address from the VMM. Sean noticed that mmioread unintentionally exposes the value of an initialized variable val on the stack...

CVE-2024-46794

In the Linux kernel, the following vulnerability has been resolved: x86/tdx: Fix data leak in mmioread The mmioread function makes a TDVMCALL to retrieve MMIO data for an address from the VMM. Sean noticed that mmioread unintentionally exposes the value of an initialized variable val on the stack...

CVE-2024-46794

CVE-2024-46794 : In the Linux kernel (x86/tdx), the mmio_read() TDVMCALL could leak the value of an initialized stack variable (val) to the VMM. The fix prevents sending the original value of *val to the VMM. The vulnerability description appears consistently in connected sources (e.g., Astra Lin...

CVE-2024-46794

In the Linux kernel, the following vulnerability has been resolved: x86/tdx: Fix data leak in mmioread The mmioread function makes a TDVMCALL to retrieve MMIO data for an address from the VMM. Sean noticed that mmioread unintentionally exposes the value of an initialized variable val on the stack...

CVE-2024-46794 x86/tdx: Fix data leak in mmio_read()

In the Linux kernel, the following vulnerability has been resolved: x86/tdx: Fix data leak in mmioread The mmioread function makes a TDVMCALL to retrieve MMIO data for an address from the VMM. Sean noticed that mmioread unintentionally exposes the value of an initialized variable val on the stack...

CVE-2024-46794 x86/tdx: Fix data leak in mmio_read()

In the Linux kernel, the following vulnerability has been resolved: x86/tdx: Fix data leak in mmioread The mmioread function makes a TDVMCALL to retrieve MMIO data for an address from the VMM. Sean noticed that mmioread unintentionally exposes the value of an initialized variable val on the stack...

CVE-2024-39283

Incomplete filtering of special elements in IntelR TDX module software before version TDX1.5.01.00.592 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-39283

Incomplete filtering of special elements in IntelR TDX module software before version TDX1.5.01.00.592 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-21801

Insufficient control flow management in some IntelR TDX module software before version 1.5.05.46.698 may allow a privileged user to potentially enable denial of service via local access...

CVE-2024-21801

Insufficient control flow management in some IntelR TDX module software before version 1.5.05.46.698 may allow a privileged user to potentially enable denial of service via local access...

CVE-2024-39283

Incomplete filtering of special elements in IntelR TDX module software before version TDX1.5.01.00.592 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-39283

Intel TDX module software prior to version TDx 1.5.01.00.592 is affected by incomplete filtering of special elements, potentially allowing an authenticated user to escalate privileges via local access. Affected product: Intel® TDX module software before TDx 1.5.01.00.592. Root cause: incomplete f...

CVE-2024-39283

Incomplete filtering of special elements in IntelR TDX module software before version TDX1.5.01.00.592 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-21801

Insufficient control flow management in some IntelR TDX module software before version 1.5.05.46.698 may allow a privileged user to potentially enable denial of service via local access...

CVE-2024-21801

Insufficient control flow management in some IntelR TDX module software before version 1.5.05.46.698 may allow a privileged user to potentially enable denial of service via local access...

CVE-2024-21801

CVE-2024-21801 affects Intel® TDX module software prior to version 1.5.05.46.698. The issue is described as insufficient control flow management in the TDX module software, which may allow a privileged local attacker to cause a denial of service. Affected products are Intel® TDX module software v...

Intel® TDX Module Software Advisory

Summary: Potential security vulnerabily in some Intel® Trust Domain Extensions Intel® TDX module software may allow denial of service. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2024-21801 Description: Insufficient control fl...

HPESBHF04693 rev.1 - Certain HPE StoreEasy Servers Using Certain Intel Processors, INTEL-SA-01010, Intel TDX Module Software Advisory, Local Escalation of Privilege Vulnerability

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreEasy 1670 Performance Storage - Prior to v2.1011-28-2023 HPE StoreEasy 1670 Storage - Prior to v2.1011-28-2023 HPE StoreEasy 1870 Performance Storage - Prior to...