Memory Decryption Vulnerability in Linux Kernel Affecting CoCo VMs

CVE-2024-57793

Summary

A vulnerability exists in the Linux kernel that pertains to CoCo virtual machines (VMs), where an untrusted host can trigger failures in the set_memory_decrypted() function. When this function fails, it may inadvertently leak decrypted memory by sharing it with the page allocator instead of properly handling the error. This situation can lead to both functional and security complications, underscoring the necessity for careful error management in memory operations.

References