CVE-2024-36913

🎯 CVE-2024-36913 🇪🇺 EUVD

💬 0 Diskussion 📄 .md Alle CVEs anzeigen ✕

CVE-2024-36913 | In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Leak pages if set_memory_encrypted() fails In CoCo VMs it is possible for the untrusted host to cause set_memory_encrypted() or set_memory_decrypted() to fail such that an error is returned and the resulting memory is shared. Callers need to take care to handle these errors to avoid returning decrypted (shared) memory to the page allocator, which could lead to functional

In the Linux kernel, the following vulnerability has been resolved:

Drivers: hv: vmbus: Leak pages if set_memory_encrypted() fails

In CoCo VMs it is possible for the untrusted host to cause
set_memory_encrypted() or set_memory_decrypted() to fail such that an
error is returned and the resulting memory is shared. Callers need to
take care to handle these errors to avoid returning decrypted (shared)
memory to the page allocator, which could lead to functional or security
issues.

VMBus code could free decrypted pages if set_memory_encrypted()/decrypted()
fails. Leak the pages if this happens.

Klassifikation & Betroffenheit:

CWE-1258 Linux Linux f2f136c05fb6093818a3b3fefcba46231ac66a62 <03f5a999adba062456c8c818a683beb1b498983aLinux patch: 6.6.31Linux f2f136c05fb6093818a3b3fefcba46231ac66a62 <6123a4e8e25bd40cf44db14694abac00e6b664e6Linux patch: 0Linux 5.16Linux patch: 6.9Linux patch: 6.8.10Linux f2f136c05fb6093818a3b3fefcba46231ac66a62 <e813a0fc2e597146e9cebea61ced9c796d4e308f

Exposure of Sensitive System Information Due to Uncleared Debug Information

The hardware does not fully clear security-sensitive values, such as keys and intermediate values in cryptographic operations, when debug mode is entered.

🛡️ Empfohlene Mitigation: Whenever debug mode is enabled, all registers containing sensitive assets must be cleared.

Vollständige Definition bei MITRE ➔

⚔️ Typische Angriffsmuster (CAPEC):

CAPEC-37 · Retrieve Embedded Sensitive Data (Very High) CAPEC-150 · Collect Data from Common Resource Locati… (Medium) CAPEC-204 · Lifting Sensitive Data Embedded in Cache (Medium) CAPEC-545 · Pull Data from System Resources

🎯 ATT&CK-Techniken (Kill-Chain-Verhalten):

T1005 · Data from Local System T1552.004 · Unsecured Credentials: Private Key… T1003 · OS Credential Dumping T1119 · Automated Collection T1213 · Data from Information Repositories T1530 · Data from Cloud Storage Object

🧩 Ähnliche Schwachstellen (Hersteller/Klasse/Score-Band):

CVE-2026-74705 10.0 CVE-2026-74612 10.0 CVE-2026-74475 10.0 CVE-2026-74309 10.0 CVE-2026-74280 10.0

🩹 Patch verfügbar (OSV):

🩹 Kernel ≥ 6.1.143 🩹 Kernel ≥ 6.6.31 🩹 Kernel ≥ 6.8.10

🇩🇪 BSI-Sicherheitshinweise: BSI · mittel · Linux Kernel: Mehrere Schwachstellen ermöglichen Denial of Service und ↗

📚 Referenzen & Quellen:

🇪🇺 Original-Eintrag (ENISA EUVD) 🇺🇸 NVD-Eintrag

Ausnutzungs-Zeitleiste:

Reserviert 2024

Veröffentlicht 05/2024

Heute 19.10.

CVSS-Vektor-Analyse: 9.3

AV · Angriffsvektor Lokal

AC · Komplexität Gering

PR · Privilegien Keine

UI · Interaktion Keine

S · Scope Verändert

C · Vertraulichkeit Hoch

I · Integrität Hoch

A · Verfügbarkeit Hoch

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

CNA-Bewertung (Linux): 9.3 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Veröffentlicht:30.05.2024

Aktualisiert:05.08.2026 11:32

Assigner (CNA):Linux

EUVD-ID:EUVD-2024-36264

EPSS-Verlauf (2 Messungen)

CWE-1258 ✓ Offizieller Patch / Advisory verfügbar

💡 Gegenmaßnahme: Kernel-Paket aktualisieren (apt upgrade linux-image / yum update kernel) und System neu starten.

Tier	CVEs	Anteil
≥90 %	723	0,2 %
≥50 %	3.221	0,9 %
≥10 %	22.089	5,9 %
<10 %	346.202	93,0 %

Noch keine Analyse zu CVE-2024-36913

Beitrag zu CVE-2024-36913 verfassen

Zero-Day & Vulnerability Intelligence Hub