Threats tagged 'ghsa-w36c-ppc4-pwgg'

CVE-2024-47727 is a high-severity vulnerability in the Linux kernel's x86 TDX subsystem related to an incorrect check for in-kernel MMIO operations. The kernel's handle_mmio() function incorrectly treats certain userspace-triggered MMIO #VE exceptions as kernel-initiated, allowing userspace to deceive the kernel into performing MMIO on its behalf. This flaw has been fixed by ensuring the target MMIO address is verified to be within the kernel before decoding instructions.