CVE-2024-36912

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2024-36912
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-36912.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-36912
Downstream
Related
Published
2024-05-30T15:29:10Z
Modified
2025-10-17T06:26:27.076831Z
Severity
  • 8.1 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
Drivers: hv: vmbus: Track decrypted status in vmbus_gpadl
Details

In the Linux kernel, the following vulnerability has been resolved:

Drivers: hv: vmbus: Track decrypted status in vmbus_gpadl

In CoCo VMs it is possible for the untrusted host to cause setmemoryencrypted() or setmemorydecrypted() to fail such that an error is returned and the resulting memory is shared. Callers need to take care to handle these errors to avoid returning decrypted (shared) memory to the page allocator, which could lead to functional or security issues.

In order to make sure callers of vmbusestablishgpadl() and vmbusteardowngpadl() don't return decrypted/shared pages to allocators, add a field in struct vmbus_gpadl to keep track of the decryption status of the buffers. This will allow the callers to know if they should free or leak the pages.

References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
d4dccf353db80e209f262e3973c834e6e48ba9a9
Fixed
1999644d95194d4a58d3e80ad04ce19220a01a81
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
d4dccf353db80e209f262e3973c834e6e48ba9a9
Fixed
8e62341f5c45b27519b7d193bcc32ada416ad9d8
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
d4dccf353db80e209f262e3973c834e6e48ba9a9
Fixed
bfae56be077ba14311509e70706a13458f87ea99
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
d4dccf353db80e209f262e3973c834e6e48ba9a9
Fixed
211f514ebf1ef5de37b1cf6df9d28a56cfd242ca

Affected versions

v5.*

v5.15
v5.15-rc6
v5.15-rc7
v5.16
v5.16-rc1
v5.16-rc2
v5.16-rc3
v5.16-rc4
v5.16-rc5
v5.16-rc6
v5.16-rc7
v5.16-rc8
v5.17
v5.17-rc1
v5.17-rc2
v5.17-rc3
v5.17-rc4
v5.17-rc5
v5.17-rc6
v5.17-rc7
v5.17-rc8
v5.18
v5.18-rc1
v5.18-rc2
v5.18-rc3
v5.18-rc4
v5.18-rc5
v5.18-rc6
v5.18-rc7
v5.19
v5.19-rc1
v5.19-rc2
v5.19-rc3
v5.19-rc4
v5.19-rc5
v5.19-rc6
v5.19-rc7
v5.19-rc8

v6.*

v6.0
v6.0-rc1
v6.0-rc2
v6.0-rc3
v6.0-rc4
v6.0-rc5
v6.0-rc6
v6.0-rc7
v6.1
v6.1-rc1
v6.1-rc2
v6.1-rc3
v6.1-rc4
v6.1-rc5
v6.1-rc6
v6.1-rc7
v6.1-rc8
v6.1.1
v6.1.10
v6.1.11
v6.1.12
v6.1.13
v6.1.14
v6.1.15
v6.1.16
v6.1.17
v6.1.18
v6.1.19
v6.1.2
v6.1.20
v6.1.21
v6.1.22
v6.1.23
v6.1.24
v6.1.25
v6.1.26
v6.1.27
v6.1.28
v6.1.29
v6.1.3
v6.1.30
v6.1.31
v6.1.32
v6.1.33
v6.1.34
v6.1.35
v6.1.36
v6.1.37
v6.1.38
v6.1.39
v6.1.4
v6.1.40
v6.1.41
v6.1.42
v6.1.43
v6.1.44
v6.1.45
v6.1.46
v6.1.47
v6.1.48
v6.1.49
v6.1.5
v6.1.50
v6.1.51
v6.1.52
v6.1.53
v6.1.54
v6.1.55
v6.1.56
v6.1.57
v6.1.58
v6.1.59
v6.1.6
v6.1.60
v6.1.61
v6.1.62
v6.1.63
v6.1.64
v6.1.65
v6.1.66
v6.1.67
v6.1.68
v6.1.69
v6.1.7
v6.1.70
v6.1.71
v6.1.72
v6.1.73
v6.1.74
v6.1.75
v6.1.76
v6.1.77
v6.1.78
v6.1.79
v6.1.8
v6.1.80
v6.1.81
v6.1.82
v6.1.83
v6.1.84
v6.1.85
v6.1.86
v6.1.87
v6.1.88
v6.1.89
v6.1.9
v6.1.90
v6.2
v6.2-rc1
v6.2-rc2
v6.2-rc3
v6.2-rc4
v6.2-rc5
v6.2-rc6
v6.2-rc7
v6.2-rc8
v6.3
v6.3-rc1
v6.3-rc2
v6.3-rc3
v6.3-rc4
v6.3-rc5
v6.3-rc6
v6.3-rc7
v6.4
v6.4-rc1
v6.4-rc2
v6.4-rc3
v6.4-rc4
v6.4-rc5
v6.4-rc6
v6.4-rc7
v6.5
v6.5-rc1
v6.5-rc2
v6.5-rc3
v6.5-rc4
v6.5-rc5
v6.5-rc6
v6.5-rc7
v6.6
v6.6-rc1
v6.6-rc2
v6.6-rc3
v6.6-rc4
v6.6-rc5
v6.6-rc6
v6.6-rc7
v6.6.1
v6.6.10
v6.6.11
v6.6.12
v6.6.13
v6.6.14
v6.6.15
v6.6.16
v6.6.17
v6.6.18
v6.6.19
v6.6.2
v6.6.20
v6.6.21
v6.6.22
v6.6.23
v6.6.24
v6.6.25
v6.6.26
v6.6.27
v6.6.28
v6.6.29
v6.6.3
v6.6.30
v6.6.4
v6.6.5
v6.6.6
v6.6.7
v6.6.8
v6.6.9
v6.7
v6.7-rc1
v6.7-rc2
v6.7-rc3
v6.7-rc4
v6.7-rc5
v6.7-rc6
v6.7-rc7
v6.7-rc8
v6.8
v6.8-rc1
v6.8-rc2
v6.8-rc3
v6.8-rc4
v6.8-rc5
v6.8-rc6
v6.8-rc7
v6.8.1
v6.8.2
v6.8.3
v6.8.4
v6.8.5
v6.8.6
v6.8.7
v6.8.8
v6.8.9

Database specific

vanir_signatures

[
    {
        "signature_version": "v1",
        "id": "CVE-2024-36912-048c0098",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "203183176315912333744998368517424200954",
                "68013136317085840765655667843188033289",
                "126721726621294178856906620918372770562",
                "308964760115542924875365128972232540740"
            ]
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1999644d95194d4a58d3e80ad04ce19220a01a81",
        "target": {
            "file": "include/linux/hyperv.h"
        },
        "signature_type": "Line"
    },
    {
        "signature_version": "v1",
        "id": "CVE-2024-36912-0831e15a",
        "digest": {
            "length": 2244.0,
            "function_hash": "133570929525983148655483631063757443095"
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1999644d95194d4a58d3e80ad04ce19220a01a81",
        "target": {
            "function": "__vmbus_establish_gpadl",
            "file": "drivers/hv/channel.c"
        },
        "signature_type": "Function"
    },
    {
        "signature_version": "v1",
        "id": "CVE-2024-36912-292e9cfb",
        "digest": {
            "length": 1271.0,
            "function_hash": "127956300578601292476478230922518754229"
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@211f514ebf1ef5de37b1cf6df9d28a56cfd242ca",
        "target": {
            "function": "vmbus_teardown_gpadl",
            "file": "drivers/hv/channel.c"
        },
        "signature_type": "Function"
    },
    {
        "signature_version": "v1",
        "id": "CVE-2024-36912-34dea809",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "323678840122418173750843981816184675314",
                "201740942301828041479229403362668167163",
                "250903831035625814510213699263615484478",
                "239093912162038853496349790387805874158",
                "276747577148664434397246063199569889180",
                "177372239425777717610113765054041880680",
                "273211488439906717024565265710586746464",
                "262736660523471108523156214017967235451",
                "127185380014169367741747785429924284593",
                "173925435320830932196713552929372443759",
                "56666617940415040408000920800407707410",
                "210103669136477558946333045195940317201",
                "220561620700816180689077340397567638474",
                "70099237215659492132497849722846007792"
            ]
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1999644d95194d4a58d3e80ad04ce19220a01a81",
        "target": {
            "file": "drivers/hv/channel.c"
        },
        "signature_type": "Line"
    },
    {
        "signature_version": "v1",
        "id": "CVE-2024-36912-38e812d3",
        "digest": {
            "length": 1271.0,
            "function_hash": "127956300578601292476478230922518754229"
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8e62341f5c45b27519b7d193bcc32ada416ad9d8",
        "target": {
            "function": "vmbus_teardown_gpadl",
            "file": "drivers/hv/channel.c"
        },
        "signature_type": "Function"
    },
    {
        "signature_version": "v1",
        "id": "CVE-2024-36912-648b1b5d",
        "digest": {
            "length": 1271.0,
            "function_hash": "127956300578601292476478230922518754229"
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@1999644d95194d4a58d3e80ad04ce19220a01a81",
        "target": {
            "function": "vmbus_teardown_gpadl",
            "file": "drivers/hv/channel.c"
        },
        "signature_type": "Function"
    },
    {
        "signature_version": "v1",
        "id": "CVE-2024-36912-79de4ad2",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "323678840122418173750843981816184675314",
                "201740942301828041479229403362668167163",
                "250903831035625814510213699263615484478",
                "239093912162038853496349790387805874158",
                "276747577148664434397246063199569889180",
                "177372239425777717610113765054041880680",
                "273211488439906717024565265710586746464",
                "262736660523471108523156214017967235451",
                "127185380014169367741747785429924284593",
                "173925435320830932196713552929372443759",
                "56666617940415040408000920800407707410",
                "210103669136477558946333045195940317201",
                "220561620700816180689077340397567638474",
                "70099237215659492132497849722846007792"
            ]
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@211f514ebf1ef5de37b1cf6df9d28a56cfd242ca",
        "target": {
            "file": "drivers/hv/channel.c"
        },
        "signature_type": "Line"
    },
    {
        "signature_version": "v1",
        "id": "CVE-2024-36912-7bf8a9ce",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "203183176315912333744998368517424200954",
                "68013136317085840765655667843188033289",
                "126721726621294178856906620918372770562",
                "308964760115542924875365128972232540740"
            ]
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@211f514ebf1ef5de37b1cf6df9d28a56cfd242ca",
        "target": {
            "file": "include/linux/hyperv.h"
        },
        "signature_type": "Line"
    },
    {
        "signature_version": "v1",
        "id": "CVE-2024-36912-a5409ead",
        "digest": {
            "length": 1271.0,
            "function_hash": "127956300578601292476478230922518754229"
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bfae56be077ba14311509e70706a13458f87ea99",
        "target": {
            "function": "vmbus_teardown_gpadl",
            "file": "drivers/hv/channel.c"
        },
        "signature_type": "Function"
    },
    {
        "signature_version": "v1",
        "id": "CVE-2024-36912-ac2119e4",
        "digest": {
            "length": 2244.0,
            "function_hash": "133570929525983148655483631063757443095"
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bfae56be077ba14311509e70706a13458f87ea99",
        "target": {
            "function": "__vmbus_establish_gpadl",
            "file": "drivers/hv/channel.c"
        },
        "signature_type": "Function"
    },
    {
        "signature_version": "v1",
        "id": "CVE-2024-36912-bb866031",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "323678840122418173750843981816184675314",
                "201740942301828041479229403362668167163",
                "250903831035625814510213699263615484478",
                "239093912162038853496349790387805874158",
                "276747577148664434397246063199569889180",
                "177372239425777717610113765054041880680",
                "273211488439906717024565265710586746464",
                "262736660523471108523156214017967235451",
                "127185380014169367741747785429924284593",
                "173925435320830932196713552929372443759",
                "56666617940415040408000920800407707410",
                "210103669136477558946333045195940317201",
                "220561620700816180689077340397567638474",
                "70099237215659492132497849722846007792"
            ]
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bfae56be077ba14311509e70706a13458f87ea99",
        "target": {
            "file": "drivers/hv/channel.c"
        },
        "signature_type": "Line"
    },
    {
        "signature_version": "v1",
        "id": "CVE-2024-36912-d00ddf3f",
        "digest": {
            "length": 2244.0,
            "function_hash": "133570929525983148655483631063757443095"
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@211f514ebf1ef5de37b1cf6df9d28a56cfd242ca",
        "target": {
            "function": "__vmbus_establish_gpadl",
            "file": "drivers/hv/channel.c"
        },
        "signature_type": "Function"
    },
    {
        "signature_version": "v1",
        "id": "CVE-2024-36912-e26c52e0",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "203183176315912333744998368517424200954",
                "68013136317085840765655667843188033289",
                "126721726621294178856906620918372770562",
                "308964760115542924875365128972232540740"
            ]
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8e62341f5c45b27519b7d193bcc32ada416ad9d8",
        "target": {
            "file": "include/linux/hyperv.h"
        },
        "signature_type": "Line"
    },
    {
        "signature_version": "v1",
        "id": "CVE-2024-36912-ec768ae6",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "323678840122418173750843981816184675314",
                "201740942301828041479229403362668167163",
                "250903831035625814510213699263615484478",
                "239093912162038853496349790387805874158",
                "276747577148664434397246063199569889180",
                "177372239425777717610113765054041880680",
                "273211488439906717024565265710586746464",
                "262736660523471108523156214017967235451",
                "127185380014169367741747785429924284593",
                "173925435320830932196713552929372443759",
                "56666617940415040408000920800407707410",
                "210103669136477558946333045195940317201",
                "220561620700816180689077340397567638474",
                "70099237215659492132497849722846007792"
            ]
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8e62341f5c45b27519b7d193bcc32ada416ad9d8",
        "target": {
            "file": "drivers/hv/channel.c"
        },
        "signature_type": "Line"
    },
    {
        "signature_version": "v1",
        "id": "CVE-2024-36912-f749f2d7",
        "digest": {
            "length": 2244.0,
            "function_hash": "133570929525983148655483631063757443095"
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@8e62341f5c45b27519b7d193bcc32ada416ad9d8",
        "target": {
            "function": "__vmbus_establish_gpadl",
            "file": "drivers/hv/channel.c"
        },
        "signature_type": "Function"
    },
    {
        "signature_version": "v1",
        "id": "CVE-2024-36912-fb780751",
        "digest": {
            "threshold": 0.9,
            "line_hashes": [
                "203183176315912333744998368517424200954",
                "68013136317085840765655667843188033289",
                "126721726621294178856906620918372770562",
                "308964760115542924875365128972232540740"
            ]
        },
        "deprecated": false,
        "source": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git@bfae56be077ba14311509e70706a13458f87ea99",
        "target": {
            "file": "include/linux/hyperv.h"
        },
        "signature_type": "Line"
    }
]

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.1.91
Type
ECOSYSTEM
Events
Introduced
6.2.0
Fixed
6.6.31
Type
ECOSYSTEM
Events
Introduced
6.7.0
Fixed
6.8.10