Linux Kernel TDX Private Memory Access Vulnerability Leading to Panic

A vulnerability in the Linux kernel related to Intel's Trusted Domain Extensions (TDX) has been addressed. TDX private memory, which includes all normal kernel memory such as stacks and text, can theoretically trigger a virtualization exception (#VE) on accesses to private memory. This is problematic because handling such exceptions can disrupt kernel operations. However, TDX can be configured to disable these exceptions on private memory access. The kernel now ensures this configuration is set during early boot, panicking if it is not, to prevent any potential issues.

Impact

Exploitation of this vulnerability could lead to a kernel panic, causing a denial of service by abruptly terminating the kernel's operations.