CVE-2024-35939: linux-libc-dev - dma-direct: Leak pages on dma_set_decrypted() failure
Summary
CVE-2024-35939: In the Linux kernel, the following vulnerability has been resolved: dma-direct: Leak pages on dma_set_decrypted() failure On TDX it is possible for the untrusted host to cause set_memory_encrypted() or set_memory_decrypt... Affects linux versions 5.10.103-1 – 6.9.9-1. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
linux-libc-dev is a package in the Linux kernel that provides the C library headers for the kernel. It is an essential component for developing applications that run on Linux. The package contains various functions and definitions that are necessary for interacting with the kernel. However, a vulnerability has been discovered in the dma-direct functionality of linux-libc-dev, which can lead to the leakage of pages on dma_set_decrypted() failure.
Vulnerability Detail
The vulnerability in linux-libc-dev arises when set_memory_encrypted() or set_memory_decrypted() fails on TDX, allowing the untrusted host to cause an error and share the resulting memory. If not handled properly, this can lead to the return of decrypted (shared) memory to the page allocator, potentially causing functional or security issues. In rare cases, dma_set_decrypted() can fail and free decrypted/shared pages. To mitigate this, the pages should be leaked instead of being freed.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
No specific workaround has been provided for this vulnerability.
Conclusion
The vulnerability in linux-libc-dev's dma-direct functionality can lead to the leakage of pages on dma_set_decrypted() failure. It is important to update the package to a patched version to mitigate this issue. Regularly checking for updates and promptly applying them is essential for maintaining a secure system. If you need further assistance or support in addressing this vulnerability, please contact DevNack.com.
See every vulnerability recorded for linux →
FAQ
linux-libc-dev is a package in the Linux kernel that provides the C library headers for the kernel. It is essential for developing applications that run on Linux.
dma-direct is a functionality in linux-libc-dev that handles direct memory access. It allows devices to read from or write to system memory without involving the CPU.
This vulnerability can be exploited by an untrusted host on TDX, causing set_memory_encrypted() or set_memory_decrypted() to fail and share memory. If not handled properly, this can lead to the return of decrypted (shared) memory to the page allocator.
If the vulnerability is not addressed, it can result in functional or security issues. The leakage of decrypted (shared) memory to the page allocator can compromise the integrity and confidentiality of the system.
To protect your system, it is recommended to update the linux-libc-dev package to a version that includes the necessary patches. Regularly checking for updates and applying them promptly is crucial for maintaining the security of your system.
Related vulnerabilities
Recent vulnerabilities recorded for linux.
