QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2024-46794

Back to search

CVE-2024-46794

Published: Sep 18, 2024

Modified: May 11, 2026

PUBLISHED

Description

In the Linux kernel, the following vulnerability has been resolved: x86/tdx: Fix data leak in mmio_read() The mmio_read() function makes a TDVMCALL to retrieve MMIO data for an address from the VMM. Sean noticed that mmio_read() unintentionally exposes the value of an initialized variable (val) on the stack to the VMM. This variable is only needed as an output value. It did not need to be passed to the VMM in the first place. Do not send the original value of *val to the VMM. [ dhansen: clarify what 'val' is used for. ]

VendorProductVersions

Linux

Linux

affected
31d58c4e557d46fa7f8557714250fb6f89c941ae - < 26c6af49d26ffc377e392e30d4086db19eed0ef7
affected
31d58c4e557d46fa7f8557714250fb6f89c941ae - < ef00818c50cf55a3a56bd9a9fae867c92dfb84e7
affected
31d58c4e557d46fa7f8557714250fb6f89c941ae - < b55ce742afcb8e8189d82f2f1e635ba1b5a461fa
affected
31d58c4e557d46fa7f8557714250fb6f89c941ae - < b6fb565a2d15277896583d471b21bc14a0c99661

Linux

Linux

affected
5.19
unaffected
0 - < 5.19
unaffected
6.1.110 - <= 6.1.*
unaffected
6.6.51 - <= 6.6.*
unaffected
6.10.10 - <= 6.10.*

+1 more versions

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now