An issue was discovered in the Linux kernel through 5.10.1, as used with Xen through 4.14.x. The Linux kernel PV block backend expects the kernel thread handler to reset ring->xenblkd to NULL when stopped. However, the handler may not have time to run if the frontend quickly toggles between the states connect and disconnect. As a consequence, the block backend may re-use a pointer after it was freed. A misbehaving guest can trigger a dom0 crash by continuously connecting / disconnecting a block frontend. Privilege escalation and information leaks cannot be ruled out. This only affects systems with a Linux blkback.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade linux-ltsUpgrade xen | Mar 26, 2024 | Dec 15, 2020 |
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade kernel-livepatch-4.14.214-160.339Upgrade kernel-headersUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-toolsUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-debuginfoUpgrade kernel-tools-devel | Jan 27, 2021 | Dec 15, 2020 |
| Amazon_linux | — | Upgrade kernel | Jan 27, 2021 | Dec 15, 2020 |
| Debian | — | Upgrade linux | Feb 3, 2021 | Dec 15, 2020 |
| Gentoo Linux | — | Upgrade app-emulation/xen. | Jul 13, 2021 | Dec 15, 2020 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libs | Apr 20, 2022 | Dec 15, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libs | Feb 8, 2021 | Dec 15, 2020 |
| Oracle_linux | — | Upgrade kernel-uek-toolsUpgrade kernel-uek-tools-libsUpgrade kernel-uek-container-debugUpgrade kernel-uek-develUpgrade kernel-uek-firmwareUpgrade kernel-uekUpgrade kernel-uek-containerUpgrade kernel-uek-docUpgrade kernel-uek-debugUpgrade kernel-uek-headersUpgrade perfUpgrade kernel-uek-debug-develUpgrade kernel-uek-tools-libs-develUpgrade python-perf | Jan 13, 2021 | Dec 15, 2020 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-default-extra | Jan 18, 2021 | Dec 15, 2020 |
| Ubuntu | — | Upgrade linux-image-gke-4.15Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-lowlatencyUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-genericUpgrade linux-image-5.8.0-1024-awsUpgrade linux-image-gcpUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.4.0-1147-raspi2Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-raspi2Upgrade linux-image-4.15.0-1093-gcpUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.4.0-1036-gkeUpgrade linux-image-5.4.0-66-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-1038-oracleUpgrade linux-image-4.4.0-1089-kvmUpgrade linux-image-4.15.0-1012-dell300xUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-lts-xenialUpgrade linux-image-oem-osp1Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-5.4.0-1038-awsUpgrade linux-image-4.15.0-136-generic-lpaeUpgrade linux-image-virtualUpgrade linux-image-4.4.0-1087-awsUpgrade linux-image-5.8.0-1016-raspiUpgrade linux-image-5.4.0-1010-gkeopUpgrade linux-image-5.4.0-1029-raspiUpgrade linux-image-powerpc64-embUpgrade linux-image-5.4.0-1037-gcpUpgrade linux-image-5.8.0-44-generic-64kUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-66-genericUpgrade linux-image-raspi-nolpaeUpgrade linux-image-gkeopUpgrade linux-image-5.4.0-1040-azureUpgrade linux-image-4.4.0-204-generic-lpaeUpgrade linux-image-4.15.0-1085-kvmUpgrade linux-image-5.8.0-44-genericUpgrade linux-image-powerpc-e500mcUpgrade linux-image-4.15.0-1079-raspi2Upgrade linux-image-5.8.0-44-lowlatencyUpgrade linux-image-dell300xUpgrade linux-image-gke-5.4Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.8.0-1023-gcpUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.8.0-1023-azureUpgrade linux-image-awsUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-4.15.0-1108-azureUpgrade linux-image-4.15.0-136-genericUpgrade linux-image-4.4.0-204-lowlatencyUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-66-generic-lpaeUpgrade linux-image-raspiUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.4.0-204-genericUpgrade linux-image-4.4.0-204-powerpc64-smpUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.8.0-1021-oracleUpgrade linux-image-4.4.0-1123-awsUpgrade linux-image-5.4.0-1033-kvmUpgrade linux-image-oracleUpgrade linux-image-4.4.0-204-powerpc64-embUpgrade linux-image-snapdragonUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.15.0-1065-oracleUpgrade linux-image-4.4.0-204-powerpc-e500mcUpgrade linux-image-gkeUpgrade linux-image-5.8.0-1019-kvmUpgrade linux-image-5.8.0-1016-raspi-nolpaeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-azureUpgrade linux-image-oem-20.04Upgrade linux-image-oemUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-1151-snapdragonUpgrade linux-image-4.15.0-1094-awsUpgrade linux-image-5.8.0-44-generic-lpaeUpgrade linux-image-kvmUpgrade linux-image-4.15.0-136-lowlatencyUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-powerpc-smpUpgrade linux-image-4.15.0-1079-gkeUpgrade linux-image-4.15.0-1096-snapdragonUpgrade linux-image-4.4.0-204-powerpc-smpUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-powerpc64-smpUpgrade linux-image-aws-lts-18.04Upgrade linux-image-aws-hweUpgrade linux-image-azure-lts-18.04Upgrade linux-image-virtual-hwe-20.04 | Feb 26, 2021 | Dec 15, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 15, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub