Riskcovery

CVE-2024-46794

x86/tdx: Fix data leak in mmio_read()

State
Published
Severity
Not scored
Published
Sep 18, 2024
Updated
May 11, 2026
Reserved
Sep 11, 2024

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

x86/tdx: Fix data leak in mmio_read()

The mmio_read() function makes a TDVMCALL to retrieve MMIO data for an address from the VMM.

Sean noticed that mmio_read() unintentionally exposes the value of an initialized variable (val) on the stack to the VMM.

This variable is only needed as an output value. It did not need to be passed to the VMM in the first place.

Do not send the original value of *val to the VMM.

[ dhansen: clarify what 'val' is used for. ]

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 31d58c4e557d46fa7f8557714250fb6f89c941ae to before 26c6af49d26ffc377e392e30d4086db19eed0ef7Affected
  • 31d58c4e557d46fa7f8557714250fb6f89c941ae to before ef00818c50cf55a3a56bd9a9fae867c92dfb84e7Affected
  • 31d58c4e557d46fa7f8557714250fb6f89c941ae to before b55ce742afcb8e8189d82f2f1e635ba1b5a461faAffected
  • 31d58c4e557d46fa7f8557714250fb6f89c941ae to before b6fb565a2d15277896583d471b21bc14a0c99661Affected
LinuxLinux
  • 5.19Affected
  • before 5.19Not affected
  • 6.1.110 through 6.1.*Not affected
  • 6.6.51 through 6.6.*Not affected
  • 6.10.10 through 6.10.*Not affected
  • 6.11 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.