Untrusted VMM can trigger int80 syscall handling in Linux kernel before 6.6.7
CVE-2024-25744

8.8HIGH

Key Information:

Vendor

Linux
Status
Linux Kernel
Vendor
CVE Published:
12 February 2024

What is CVE-2024-25744?

The identified vulnerability in the Linux kernel allows an untrusted Virtual Machine Monitor (VMM) to invoke int80 syscall handling at any moment, potentially leading to security breaches and exploitation of the affected system. The issue is related to specific components within the kernel, particularly in files arch/x86/coco/tdx/tdx.c and arch/x86/mm/mem_encrypt_amd.c, and affects versions prior to 6.6.7.

References

https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/...
https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.6.7

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.