https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 03:37:18 +0000 https://vulnerability.circl.lu/vuln/cve-2024-46794 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>x86/tdx: Fix data leak in mmio_read()</p> <p>The mmio_read() function makes a TDVMCALL to retrieve MMIO data for an address from the VMM.</p> <p>Sean noticed that mmio_read() unintentionally exposes the value of an initialized variable (val) on the stack to the VMM.</p> <p>This variable is only needed as an output value. It did not need to be passed to the VMM in the first place.</p> <p>Do not send the original value of *val to the VMM.</p> <p>[ dhansen: clarify what &#39;val&#39; is used for. ]</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>x86/tdx: Fix data leak in mmio_read()</p> <p>The mmio_read() function makes a TDVMCALL to retrieve MMIO data for an address from the VMM.</p> <p>Sean noticed that mmio_read() unintentionally exposes the value of an initialized variable (val) on the stack to the VMM.</p> <p>This variable is only needed as an output value. It did not need to be passed to the VMM in the first place.</p> <p>Do not send the original value of *val to the VMM.</p> <p>[ dhansen: clarify what &#39;val&#39; is used for. ]</p> https://vulnerability.circl.lu/vuln/cve-2024-46794