Skip to content
OpenAdvisories

Weakness (CWE)

CWE-1258: Exposure of Sensitive System Information Due to Uncleared Debug Information

Base Draft

The hardware product enters debug mode but does not fully clear security-sensitive values, such as keys and intermediate values in cryptographic operations.

More detail

Security sensitive values, keys, intermediate steps of cryptographic operations, etc. are stored in temporary registers in the hardware.

How to prevent it (1 mitigation)

  1. Architecture and Design

    Whenever debug mode is enabled, all registers containing sensitive assets must be cleared.

Source: MITRE CWE-1258

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.3
    CVE-2024-36913

    Drivers: hv: vmbus: Leak pages if set_memory_encrypted() fails

    In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Leak pages if set_memory_encrypted() fails In CoCo VMs it is possible for the untrusted host to cause set_memory_encrypted() or set_memory_decrypted() to fail such that an…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu
  • Critical 9.6
    CVE-2024-36912

    Drivers: hv: vmbus: Track decrypted status in vmbus_gpadl

    In the Linux kernel, the following vulnerability has been resolved: Drivers: hv: vmbus: Track decrypted status in vmbus_gpadl In CoCo VMs it is possible for the untrusted host to cause set_memory_encrypted() or set_memory_decrypted() to fail such that an erro…

    Linux Linux linux-raspi2 linux-hwe Linux Debian Ubuntu