CVE-2024-36912
The vulnerability in the Linux kernel's Hyper-V VMBus driver could allow an untrusted host to cause memory decryption failures, potentially returning decrypted memory to the page allocator and leading to security issues. It has been resolved by adding a decryption status track in the vmbus_gpadl structure. Users should apply the kernel patch to mitigate the risk.
An official fix is available, so this entry is kept for 30 days and then removed automatically.
Who is affected
Linux kernel users, particularly those running CoCo VMs with Hyper-V VMBus.
Real-world impact
An attacker could cause the system to mishandle memory, leading to possible data exposure, corruption, or denial of service.
Why this severity
CVSS v3.1 base score 9.6 (Critical) due to attack vector being adjacent network, low complexity, no privileges or user interaction required, with high impacts to confidentiality, integrity, and availability.
What to do about it
- 01Obtain the Linux kernel patch that addresses CVE-2024-36912 from the vendor.
- 02Apply the patch to the affected kernel version.
- 03Reboot the system to load the patched kernel.
NVD-referenced vendor advisory (NVD description states the vulnerability has been resolved)
Timeline
- May 30, 2024 · May 30, 2024PublishedDisclosed and added to the National Vulnerability Database.
- Aug 4, 2026 · 2d agoAdvisory updatedThe NVD record was last revised.
- Aug 5, 2026 · 1d agoOfficial fix availableA vendor patch or mitigation now exists — see the remediation steps above.