The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The make_response function in drivers/block/xen-blkback/blkback.c in the Linux kernel before 4.11.8 allows guest OS users to obtain sensitive information from host OS (or other guest OS) kernel memory by leveraging the copying of uninitialized padding fields in Xen block-interface response structures, aka XSA-216.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade xen | Oct 27, 2017 | Jul 5, 2017 |
| Debian | — | Upgrade linuxUpgrade qemu | Jul 27, 2017 | Jul 4, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade kernelUpgrade python-perfUpgrade kernel-debuginfoUpgrade kernel-debugUpgrade kernel-develUpgrade perfUpgrade kernel-toolsUpgrade kernel-headers | Nov 30, 2017 | Jul 4, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-debug-develUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-toolsUpgrade perfUpgrade kernel | Nov 30, 2017 | Jul 4, 2017 |
| Suse | — | Upgrade xen-toolsUpgrade qemu-block-curlUpgrade xen-doc-htmlUpgrade qemu-kvmUpgrade qemu-block-rbdUpgrade xen-libs-32bitUpgrade qemu-block-sshUpgrade qemu-s390Upgrade xen-kmp-defaultUpgrade qemu-ipxeUpgrade qemu-sgabiosUpgrade qemu-block-iscsiUpgrade qemu-guest-agentUpgrade qemu-vgabiosUpgrade qemu-x86Upgrade xenUpgrade xen-libsUpgrade qemu-langUpgrade xen-tools-domUUpgrade qemuUpgrade qemu-armUpgrade qemu-seabiosUpgrade qemu-ppcUpgrade qemu-tools | Jul 6, 2017 | Jul 4, 2017 |
| Ubuntu | — | Upgrade linux-image-raspi2Upgrade linux-image-3.13.0-135-powerpc64-smpUpgrade linux-image-4.4.0-1078-snapdragonUpgrade qemu-system-mipsUpgrade qemu-system-miscUpgrade linux-image-4.4.0-98-powerpc64-embUpgrade linux-image-awsUpgrade linux-image-4.4.0-1076-raspi2Upgrade qemu-systemUpgrade linux-image-kvmUpgrade qemu-system-x86Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-powerpc64-embUpgrade linux-image-gcpUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.10.0-1020-raspi2Upgrade linux-image-4.4.0-98-generic-lpaeUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-3.13.0-135-genericUpgrade linux-image-powerpc-smp-lts-xenialUpgrade qemu-system-ppcUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.4.0-98-powerpc64-smpUpgrade linux-image-3.13.0-135-powerpc-smpUpgrade qemu-system-aarch64Upgrade linux-image-4.10.0-38-genericUpgrade linux-image-4.4.0-98-powerpc-smpUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade qemu-system-sparcUpgrade linux-image-generic-lts-trustyUpgrade linux-image-powerpc-e500Upgrade linux-image-3.13.0-135-generic-lpaeUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-3.13.0-135-powerpc-e500mcUpgrade linux-image-lowlatencyUpgrade qemu-system-s390xUpgrade linux-image-snapdragonUpgrade linux-image-4.4.0-98-genericUpgrade linux-image-genericUpgrade linux-image-3.13.0-135-powerpc64-embUpgrade linux-image-gkeUpgrade linux-image-4.4.0-1033-gkeUpgrade linux-image-4.4.0-98-powerpc-e500mcUpgrade linux-image-4.4.0-1039-awsUpgrade linux-image-powerpc64-smpUpgrade linux-image-3.13.0-135-powerpc-e500Upgrade linux-image-3.13.0-135-lowlatencyUpgrade linux-image-powerpc-e500mcUpgrade linux-image-generic-lpaeUpgrade linux-image-4.10.0-38-generic-lpaeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-powerpc-smpUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.10.0-38-lowlatencyUpgrade linux-image-4.4.0-98-lowlatencyUpgrade qemu-system-armUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-4.10.0-1008-gcpUpgrade linux-image-4.4.0-1009-kvm | Sep 13, 2017 | Jul 4, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 5, 2017 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub