In the Linux kernel, the following vulnerability has been resolved:

hv_netvsc: Don't free decrypted memory

In CoCo VMs it is possible for the untrusted host to cause
set_memory_encrypted() or set_memory_decrypted() to fail such that an
error is returned and the resulting memory is shared. Callers need to
take care to handle these errors to avoid returning decrypted (shared)
memory to the page allocator, which could lead to functional or security
issues.

The netvsc driver could free decrypted/shared pages if
set_memory_decrypted() fails. Check the decrypted field in the gpadl
to decide whether to free the memory.
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: Linux

Published:

Updated: 2025-05-04T09:11:54.805Z

Reserved: 2024-05-30T15:25:07.067Z

Link: CVE-2024-36911

cve-icon Vulnrichment

Updated: 2024-08-02T03:43:49.175Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2024-05-30T16:15:14.530

Modified: 2024-11-21T09:22:47.903

Link: CVE-2024-36911

cve-icon Redhat

Severity : Low

Publid Date: 2024-05-30T00:00:00Z

Links: CVE-2024-36911 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2025-07-12T22:09:24Z