Threats tagged 'ghsa-cx75-fvjc-vvr8'

CVE-2024-46794 is a low-severity vulnerability in the Linux kernel's x86/tdx subsystem where the mmio_read() function unintentionally leaks initialized stack variable data to the virtual machine monitor (VMM). This occurs because the variable 'val', used only as an output, was unnecessarily passed to the VMM, exposing its original value. The issue has been fixed by ensuring the original value of 'val' is not sent to the VMM.