CVE-2024-47727

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.58

Description A vulnerability in the Linux kernel's TDX module allows userspace to deceive the kernel into performing MMIO operations on its behalf. The handle mmio() function checks if the #VE exception occurred in the kernel, but userspace can trigger MMIO #VE by pointing a syscall to an MMIO address. This can lead to unauthorized access to sensitive information. The vulnerability is related to the lack of address checking in the handle mmio() function.

Recommendations For Linux kernel versions prior to 6.6.58, update to version 6.6.58 or later to resolve the issue. As a temporary workaround, consider restricting access to the handle mmio() function to minimize the risk of exploitation. Additionally, ensure that the target MMIO address is within the kernel before decoding instructions to prevent unauthorized MMIO operations.