Linux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Linux Block and Network PV device frontends don't zero memory regions before sharing them with the backend (CVE-2022-26365, CVE-2022-33740). Additionally the granularity of the grant table doesn't allow sharing less than a 4K page, leading to unrelated data residing in the same 4K page as data shared with a backend being accessible by such backend (CVE-2022-33741, CVE-2022-33742).
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade xen | Aug 22, 2024 | Jul 5, 2022 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.10.130-118.517Upgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade python-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade perfUpgrade kernel-livepatch-4.14.287-215.504Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.15.54-25.126Upgrade kernel-tools-develUpgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel | Sep 30, 2022 | Jul 5, 2022 |
| Amazon_linux | — | Upgrade kernel | Aug 5, 2022 | Jul 5, 2022 |
| Debian | — | Upgrade xenUpgrade linux | Oct 3, 2022 | Jul 5, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade bpftoolUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade python3-perf | Oct 11, 2022 | Jul 5, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-tools | Sep 14, 2022 | Jul 5, 2022 |
| Suse | — | Upgrade dlm-kmp-64kbUpgrade dtb-zteUpgrade dtb-alteraUpgrade kernel-default-develUpgrade kernel-macrosUpgrade kernel-obs-qaUpgrade kernel-symsUpgrade kernel-vanilla-baseUpgrade kernel-default-livepatchUpgrade dtb-lgUpgrade dtb-exynosUpgrade xen-tools-xendomains-wait-diskUpgrade xenUpgrade kernel-azure-develUpgrade ocfs2-kmp-64kbUpgrade kernel-azure-extraUpgrade cluster-md-kmp-defaultUpgrade dtb-qcomUpgrade xen-develUpgrade xen-doc-htmlUpgrade cluster-md-kmp-azureUpgrade dtb-freescaleUpgrade ocfs2-kmp-preemptUpgrade kernel-vanillaUpgrade kernel-default-manUpgrade kernel-vanilla-develUpgrade kselftests-kmp-64kbUpgrade gfs2-kmp-64kbUpgrade kernel-kvmsmallUpgrade kernel-preemptUpgrade kernel-sourceUpgrade kernel-64kb-livepatch-develUpgrade reiserfs-kmp-preemptUpgrade kernel-azure-baseUpgrade kernel-azure-livepatch-develUpgrade kernel-rtUpgrade dtb-alUpgrade dtb-amlogicUpgrade xen-tools-domUUpgrade kernel-64kbUpgrade kernel-default-extraUpgrade dtb-apmUpgrade kernel-syms-azureUpgrade kernel-azure-optionalUpgrade kernel-debug-baseUpgrade kernel-64kb-optionalUpgrade kernel-source-azureUpgrade kernel-docs-htmlUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-amazonUpgrade xen-libsUpgrade kernel-devel-azureUpgrade kernel-default-base-rebuildUpgrade kernel-zfcpdumpUpgrade reiserfs-kmp-64kbUpgrade kernel-64kb-develUpgrade kernel-debug-livepatch-develUpgrade kernel-kvmsmall-develUpgrade dtb-hisiliconUpgrade dtb-broadcomUpgrade dtb-allwinnerUpgrade kernel-debug-develUpgrade dtb-armUpgrade kernel-default-livepatch-develUpgrade kernel-obs-buildUpgrade kernel-default-optionalUpgrade kernel-debugUpgrade dtb-rockchipUpgrade dtb-renesasUpgrade kernel-kvmsmall-baseUpgrade dtb-xilinxUpgrade dlm-kmp-azureUpgrade kselftests-kmp-preemptUpgrade ocfs2-kmp-defaultUpgrade kernel-64kb-extraUpgrade kernel-preempt-develUpgrade kernel-zfcpdump-manUpgrade kernel-preempt-optionalUpgrade cluster-md-kmp-preemptUpgrade kernel-develUpgrade dlm-kmp-defaultUpgrade kernel-docsUpgrade cluster-md-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-azureUpgrade kernel-defaultUpgrade kernel-preempt-extraUpgrade dtb-amdUpgrade gfs2-kmp-azureUpgrade gfs2-kmp-preemptUpgrade xen-libs-32bitUpgrade ocfs2-kmp-azureUpgrade kernel-source-vanillaUpgrade dtb-marvellUpgrade kernel-azureUpgrade kselftests-kmp-defaultUpgrade kernel-vanilla-livepatch-develUpgrade kernel-preempt-livepatch-develUpgrade xen-toolsUpgrade dtb-nvidiaUpgrade dtb-appleUpgrade reiserfs-kmp-azureUpgrade dlm-kmp-preemptUpgrade dtb-caviumUpgrade dtb-sprdUpgrade kernel-default-baseUpgrade dtb-mediatekUpgrade gfs2-kmp-defaultUpgrade dtb-socionext | Oct 26, 2022 | Jul 5, 2022 |
| Ubuntu | — | Upgrade linux-image-5.4.0-128-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-233-genericUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-1054-gkeopUpgrade linux-image-azureUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-48-genericUpgrade linux-image-5.4.0-1086-awsUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.15.0-1153-azureUpgrade linux-image-4.4.0-1113-kvmUpgrade linux-image-5.4.0-1090-gcpUpgrade linux-image-ibmUpgrade linux-image-4.15.0-1142-awsUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.4.0-1084-gkeUpgrade linux-image-aws-hweUpgrade linux-image-5.4.0-128-generic-lpaeUpgrade linux-image-dell300xUpgrade linux-image-4.15.0-194-generic-lpaeUpgrade linux-image-4.15.0-194-lowlatencyUpgrade linux-image-4.4.0-233-lowlatencyUpgrade linux-image-5.4.0-1071-raspiUpgrade linux-image-4.15.0-1120-raspi2Upgrade linux-image-5.4.0-1084-oracleUpgrade linux-image-kvmUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-4.15.0-194-genericUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-raspiUpgrade linux-image-aws-lts-20.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.15.0-1020-awsUpgrade linux-image-5.4.0-1047-bluefieldUpgrade linux-image-5.15.0-1018-kvmUpgrade linux-image-raspi2Upgrade linux-image-4.15.0-1138-snapdragonUpgrade linux-image-gcpUpgrade linux-image-awsUpgrade linux-image-5.4.0-1092-azure-fdeUpgrade linux-image-5.15.0-1015-ibmUpgrade linux-image-5.15.0-1015-raspiUpgrade linux-image-5.15.0-48-generic-lpaeUpgrade linux-image-5.15.0-1016-gkeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-4.15.0-1128-kvmUpgrade linux-image-generic-lts-xenialUpgrade linux-image-gkeUpgrade linux-image-virtualUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.15.0-48-generic-64kUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.15.0-1020-azureUpgrade linux-image-4.15.0-1142-aws-hweUpgrade linux-image-bluefieldUpgrade linux-image-4.4.0-1112-awsUpgrade linux-image-4.15.0-1107-oracleUpgrade linux-image-oem-osp1Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-snapdragonUpgrade linux-image-5.15.0-1015-raspi-nolpaeUpgrade linux-image-generic-lpaeUpgrade linux-image-genericUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-gke-5.4Upgrade linux-image-oracleUpgrade linux-image-generic-64kUpgrade linux-image-oemUpgrade linux-image-5.15.0-1018-gcpUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-4.4.0-1148-awsUpgrade linux-image-intel-iotgUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1018-oracleUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.4.0-128-genericUpgrade linux-image-5.15.0-1016-intel-iotgUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-1003-gkeopUpgrade linux-image-4.15.0-1054-dell300xUpgrade linux-image-5.15.0-48-lowlatency-64kUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-5.4.0-1076-kvmUpgrade linux-image-5.15.0-48-lowlatencyUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-5.4.0-1034-ibmUpgrade linux-image-4.15.0-1137-gcpUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gkeop | Aug 19, 2022 | Jul 5, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 5, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub