CVE-2024-36909Drivers: hv: vmbus: Don't free ring buffers that couldn't be re-encrypted
- 9.3CriticalCVSS base score
- 0.24%Exploitation in 30 daysEPSS · top 85% of all CVEs
- NoKnown exploitednot in CISA's KEV catalog
- NonePublic exploitsnone known yet
Description
In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Don't free ring buffers that couldn't be re-encrypted In CoCo VMs it is possible for the untrusted host to cause set_memory_encrypted() or set_memory_decrypted() to fail such that an error is returned and the resulting memory is shared. Callers need to take care to handle these errors to avoid returning decrypted (shared) memory to the page allocator, which could lead to functional or security issues. The VMBus ring buffer code could free decrypted/shared pages if set_memory_decrypted() fails. Check the decrypted field in the struct vmbus_gpadl for the ring buffers to decide whether to free the memory.
Timeline
ID reserved
By Linux
Published
- 2 years later
· 2 years later
Record updated
Changes after publication (a new score, a public exploit, EPSS crossing 1, 10 or 50 %, leaving KEV) are kept since November 2026; earlier ones are not known.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| LinuxCNA (assigner) | 3.1 | Critical9.3 | CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H |
| NVDNVD · Modified | 3.1 | Medium5.5 | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
- EPSS (exploitation in 30 days)
- 0.24% · top 85% of all CVEs (15 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: partial
The list uses the assigner's score when there is one, then CISA's, then NVD's: Critical 9.3.
Affected products
- affected d4dccf353db80e209f262e3973c834e6e48ba9a9 – < 2f622008bf784a9f5dd17baa19223cc2ac30a039
- affected d4dccf353db80e209f262e3973c834e6e48ba9a9 – < 82f9e213b124a7d2bb5b16ea35d570260ef467e0
- affected d4dccf353db80e209f262e3973c834e6e48ba9a9 – < a9212a4e2963a7fbe3864ba33dc551d4ad8d0abb
- affected d4dccf353db80e209f262e3973c834e6e48ba9a9 – < 30d18df6567be09c1433e81993e35e3da573ac48
- affected 5.16
- unaffected < 5.16
- unaffected 6.1.91 – ≤ 6.1.*
- unaffected 6.6.31 – ≤ 6.6.*
- unaffected 6.8.10 – ≤ 6.8.*
- unaffected 6.9 – ≤ *
References
References4
- https://git.kernel.org/stable/c/2f622008bf784a9f5dd17baa19223cc2ac30a039 (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/82f9e213b124a7d2bb5b16ea35d570260ef467e0 (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/a9212a4e2963a7fbe3864ba33dc551d4ad8d0abb (opens in a new tab)x_transferred
- https://git.kernel.org/stable/c/30d18df6567be09c1433e81993e35e3da573ac48 (opens in a new tab)x_transferred
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- EUVD EUVD-2024-36260 (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://cveledger.app/cve/CVE-2024-36909)Record last updated .