Linux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Linux Block and Network PV device frontends don't zero memory regions before sharing them with the backend (CVE-2022-26365, CVE-2022-33740). Additionally the granularity of the grant table doesn't allow sharing less than a 4K page, leading to unrelated data residing in the same 4K page as data shared with a backend being accessible by such backend (CVE-2022-33741, CVE-2022-33742).
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade xen | Aug 22, 2024 | Jul 5, 2022 |
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade kernel-livepatch-5.15.54-25.126Upgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.10.130-118.517Upgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-develUpgrade perfUpgrade kernel-livepatch-4.14.287-215.504Upgrade python-perfUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernelUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfo | Sep 30, 2022 | Jul 5, 2022 |
| Amazon_linux | — | Upgrade kernel | Aug 5, 2022 | Jul 5, 2022 |
| Debian | — | Upgrade linuxUpgrade xen | Oct 3, 2022 | Jul 5, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade bpftoolUpgrade kernel | Oct 11, 2022 | Jul 5, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libs | Sep 14, 2022 | Jul 5, 2022 |
| Suse | — | Upgrade xen-doc-htmlUpgrade dtb-renesasUpgrade dtb-amlogicUpgrade cluster-md-kmp-preemptUpgrade ocfs2-kmp-azureUpgrade dtb-hisiliconUpgrade kernel-obs-qaUpgrade kselftests-kmp-64kbUpgrade kernel-sourceUpgrade kernel-preempt-livepatch-develUpgrade kernel-devel-azureUpgrade dtb-nvidiaUpgrade kselftests-kmp-preemptUpgrade dtb-qcomUpgrade dtb-mediatekUpgrade dtb-armUpgrade kernel-obs-buildUpgrade kernel-azure-develUpgrade kernel-default-manUpgrade dtb-sprdUpgrade cluster-md-kmp-64kbUpgrade kernel-syms-azureUpgrade dtb-caviumUpgrade xen-tools-xendomains-wait-diskUpgrade kernel-preemptUpgrade kernel-vanilla-livepatch-develUpgrade gfs2-kmp-preemptUpgrade kernel-defaultUpgrade kernel-docsUpgrade kernel-kvmsmall-baseUpgrade xen-develUpgrade dlm-kmp-preemptUpgrade kernel-64kb-extraUpgrade kselftests-kmp-defaultUpgrade kernel-vanilla-baseUpgrade kernel-preempt-develUpgrade reiserfs-kmp-azureUpgrade dtb-rockchipUpgrade xen-libsUpgrade gfs2-kmp-defaultUpgrade kernel-debug-livepatch-develUpgrade kernel-debug-baseUpgrade kernel-azure-livepatch-develUpgrade reiserfs-kmp-64kbUpgrade kernel-vanilla-develUpgrade kernel-kvmsmallUpgrade kernel-azure-extraUpgrade ocfs2-kmp-preemptUpgrade dtb-allwinnerUpgrade xen-libs-32bitUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-default-develUpgrade kernel-64kb-optionalUpgrade kernel-azure-baseUpgrade kernel-64kb-livepatch-develUpgrade dtb-freescaleUpgrade dlm-kmp-64kbUpgrade dtb-amazonUpgrade kernel-default-livepatchUpgrade dtb-lgUpgrade kernel-preempt-optionalUpgrade kernel-64kbUpgrade kernel-default-livepatch-develUpgrade dtb-appleUpgrade gfs2-kmp-64kbUpgrade dtb-socionextUpgrade reiserfs-kmp-defaultUpgrade kernel-debug-develUpgrade dtb-xilinxUpgrade kernel-kvmsmall-develUpgrade dtb-broadcomUpgrade kernel-64kb-develUpgrade kernel-zfcpdumpUpgrade dtb-alteraUpgrade kernel-vanillaUpgrade cluster-md-kmp-defaultUpgrade kernel-symsUpgrade kernel-docs-htmlUpgrade kernel-macrosUpgrade ocfs2-kmp-defaultUpgrade dtb-amdUpgrade xen-tools-domUUpgrade kernel-default-baseUpgrade kernel-default-extraUpgrade kernel-default-optionalUpgrade ocfs2-kmp-64kbUpgrade kernel-develUpgrade reiserfs-kmp-preemptUpgrade kernel-zfcpdump-manUpgrade kernel-debugUpgrade cluster-md-kmp-azureUpgrade dlm-kmp-defaultUpgrade dtb-marvellUpgrade kernel-source-azureUpgrade kernel-azure-optionalUpgrade dtb-exynosUpgrade dtb-apmUpgrade xen | Oct 26, 2022 | Jul 5, 2022 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1142-awsUpgrade linux-image-4.15.0-1120-raspi2Upgrade linux-image-bluefieldUpgrade linux-image-5.15.0-48-genericUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-raspi2Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oracleUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.14.0-1055-oemUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-48-generic-lpaeUpgrade linux-image-4.4.0-1113-kvmUpgrade linux-image-virtualUpgrade linux-image-generic-lts-xenialUpgrade linux-image-gkeUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-intel-iotgUpgrade linux-image-5.4.0-1086-awsUpgrade linux-image-ibmUpgrade linux-image-4.15.0-1128-kvmUpgrade linux-image-5.4.0-1034-ibmUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-1107-oracleUpgrade linux-image-gcpUpgrade linux-image-5.4.0-1047-bluefieldUpgrade linux-image-raspi-nolpaeUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-4.15.0-1137-gcpUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-1084-oracleUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1018-gcpUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-oem-osp1Upgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-48-lowlatencyUpgrade linux-image-azure-lts-18.04Upgrade linux-image-4.4.0-233-lowlatencyUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-awsUpgrade linux-image-5.4.0-1084-gkeUpgrade linux-image-5.4.0-128-genericUpgrade linux-image-oem-20.04dUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-1016-gkeUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.17.0-1024-oemUpgrade linux-image-5.15.0-1015-raspiUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.15.0-1003-gkeopUpgrade linux-image-4.15.0-194-generic-lpaeUpgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-128-lowlatencyUpgrade linux-image-5.4.0-1071-raspiUpgrade linux-image-gke-5.15Upgrade linux-image-gke-5.4Upgrade linux-image-oem-22.04Upgrade linux-image-4.4.0-1112-awsUpgrade linux-image-4.15.0-1138-snapdragonUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-20.04bUpgrade linux-image-aws-hweUpgrade linux-image-5.4.0-1090-gcpUpgrade linux-image-5.4.0-1076-kvmUpgrade linux-image-oem-20.04cUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-4.15.0-1142-aws-hweUpgrade linux-image-azureUpgrade linux-image-4.15.0-194-lowlatencyUpgrade linux-image-5.15.0-1018-kvmUpgrade linux-image-gkeop-5.15Upgrade linux-image-raspiUpgrade linux-image-oemUpgrade linux-image-genericUpgrade linux-image-5.15.0-1020-awsUpgrade linux-image-kvmUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.15.0-1015-raspi-nolpaeUpgrade linux-image-aws-lts-20.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-4.15.0-1054-dell300xUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-128-generic-lpaeUpgrade linux-image-5.15.0-48-generic-64kUpgrade linux-image-5.15.0-48-lowlatency-64kUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-1054-gkeopUpgrade linux-image-5.15.0-1020-azureUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-4.4.0-233-genericUpgrade linux-image-4.15.0-194-genericUpgrade linux-image-dell300xUpgrade linux-image-generic-64kUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-4.15.0-1153-azureUpgrade linux-image-5.15.0-1015-ibmUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-5.15.0-1016-intel-iotgUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.4.0-1092-azure-fdeUpgrade linux-image-azure-fdeUpgrade linux-image-snapdragonUpgrade linux-image-4.4.0-1148-awsUpgrade linux-image-5.15.0-1018-oracleUpgrade linux-image-gkeop | Aug 19, 2022 | Jul 5, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 5, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub