Linux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Linux Block and Network PV device frontends don't zero memory regions before sharing them with the backend (CVE-2022-26365, CVE-2022-33740). Additionally the granularity of the grant table doesn't allow sharing less than a 4K page, leading to unrelated data residing in the same 4K page as data shared with a backend being accessible by such backend (CVE-2022-33741, CVE-2022-33742).
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade xen | Aug 22, 2024 | Jul 5, 2022 |
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade python-perfUpgrade kernel-tools-develUpgrade perfUpgrade kernel-toolsUpgrade kernelUpgrade kernel-livepatch-4.14.287-215.504Upgrade python-perf-debuginfoUpgrade kernel-livepatch-5.10.130-118.517Upgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade kernel-livepatch-5.15.54-25.126Upgrade kernel-headersUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64 | Sep 30, 2022 | Jul 5, 2022 |
| Amazon_linux | — | Upgrade kernel | Aug 5, 2022 | Jul 5, 2022 |
| Debian | — | Upgrade xenUpgrade linux | Oct 3, 2022 | Jul 5, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernelUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Oct 11, 2022 | Jul 5, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-toolsUpgrade kernel-tools-libs | Sep 14, 2022 | Jul 5, 2022 |
| Suse | — | Upgrade kernel-default-baseUpgrade kernel-64kb-develUpgrade kselftests-kmp-defaultUpgrade reiserfs-kmp-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade reiserfs-kmp-preemptUpgrade dlm-kmp-defaultUpgrade kernel-zfcpdump-manUpgrade gfs2-kmp-preemptUpgrade kernel-vanilla-develUpgrade dtb-amdUpgrade dtb-renesasUpgrade kernel-debug-livepatch-develUpgrade kernel-default-livepatch-develUpgrade kernel-debugUpgrade kselftests-kmp-azureUpgrade kernel-debug-develUpgrade xen-tools-domUUpgrade cluster-md-kmp-64kbUpgrade cluster-md-kmp-preemptUpgrade kernel-zfcpdumpUpgrade dlm-kmp-azureUpgrade kernel-default-livepatchUpgrade kernel-docsUpgrade gfs2-kmp-64kbUpgrade dtb-amazonUpgrade dtb-freescaleUpgrade kernel-azure-extraUpgrade kernel-preempt-optionalUpgrade ocfs2-kmp-64kbUpgrade dtb-allwinnerUpgrade gfs2-kmp-defaultUpgrade kernel-default-manUpgrade dtb-socionextUpgrade dtb-marvellUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-64kbUpgrade kernel-vanillaUpgrade kernel-docs-htmlUpgrade dtb-appleUpgrade kernel-preempt-develUpgrade kernel-preempt-extraUpgrade kernel-preempt-livepatch-develUpgrade xenUpgrade kernel-defaultUpgrade kernel-64kb-extraUpgrade kernel-64kb-optionalUpgrade kernel-symsUpgrade kernel-64kb-livepatch-develUpgrade dtb-sprdUpgrade kernel-default-develUpgrade kernel-azure-baseUpgrade dtb-broadcomUpgrade dtb-hisiliconUpgrade kernel-64kbUpgrade xen-develUpgrade dtb-lgUpgrade dtb-rockchipUpgrade ocfs2-kmp-defaultUpgrade dtb-caviumUpgrade xen-doc-htmlUpgrade kernel-source-vanillaUpgrade kernel-devel-azureUpgrade kernel-develUpgrade kernel-vanilla-baseUpgrade dtb-alteraUpgrade kernel-kvmsmallUpgrade dtb-zteUpgrade kernel-azureUpgrade kselftests-kmp-64kbUpgrade xen-libs-32bitUpgrade reiserfs-kmp-azureUpgrade dlm-kmp-64kbUpgrade dtb-qcomUpgrade dtb-amlogicUpgrade kernel-azure-develUpgrade xen-libsUpgrade xen-toolsUpgrade kernel-sourceUpgrade dtb-nvidiaUpgrade kernel-source-azureUpgrade kernel-default-base-rebuildUpgrade dtb-xilinxUpgrade dtb-armUpgrade gfs2-kmp-azureUpgrade kernel-vanilla-livepatch-develUpgrade kernel-default-extraUpgrade kernel-preemptUpgrade kernel-macrosUpgrade kernel-kvmsmall-develUpgrade dtb-mediatekUpgrade kernel-syms-azureUpgrade dtb-alUpgrade dlm-kmp-preemptUpgrade kernel-kvmsmall-baseUpgrade kernel-default-optionalUpgrade kernel-debug-baseUpgrade dtb-exynosUpgrade kernel-obs-qaUpgrade kernel-azure-livepatch-develUpgrade xen-tools-xendomains-wait-diskUpgrade dtb-apmUpgrade cluster-md-kmp-azureUpgrade kselftests-kmp-preemptUpgrade kernel-rtUpgrade ocfs2-kmp-preemptUpgrade kernel-obs-buildUpgrade kernel-azure-optional | Oct 26, 2022 | Jul 5, 2022 |
| Ubuntu | — | Upgrade linux-image-4.15.0-194-genericUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.15.0-1138-snapdragonUpgrade linux-image-5.15.0-48-lowlatencyUpgrade linux-image-5.15.0-1020-awsUpgrade linux-image-5.15.0-48-generic-lpaeUpgrade linux-image-5.15.0-1016-intel-iotgUpgrade linux-image-awsUpgrade linux-image-5.15.0-1020-azureUpgrade linux-image-aws-lts-18.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-intel-iotgUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-48-genericUpgrade linux-image-4.15.0-1120-raspi2Upgrade linux-image-snapdragonUpgrade linux-image-5.4.0-128-generic-lpaeUpgrade linux-image-gcpUpgrade linux-image-azure-lts-18.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-raspiUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-4.15.0-194-generic-lpaeUpgrade linux-image-4.15.0-194-lowlatencyUpgrade linux-image-5.15.0-1018-gcpUpgrade linux-image-gkeop-5.15Upgrade linux-image-4.15.0-1054-dell300xUpgrade linux-image-4.15.0-1153-azureUpgrade linux-image-4.15.0-1142-aws-hweUpgrade linux-image-5.15.0-1015-raspi-nolpaeUpgrade linux-image-azureUpgrade linux-image-gke-5.4Upgrade linux-image-5.15.0-1016-gkeUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.15.0-48-lowlatency-64kUpgrade linux-image-dell300xUpgrade linux-image-5.15.0-1015-ibmUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-oem-osp1Upgrade linux-image-kvmUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oem-20.04Upgrade linux-image-5.4.0-1090-gcpUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.4.0-1092-azure-fdeUpgrade linux-image-gke-5.15Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-raspi2Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-generic-lpaeUpgrade linux-image-5.4.0-1076-kvmUpgrade linux-image-4.15.0-1128-kvmUpgrade linux-image-bluefieldUpgrade linux-image-5.15.0-1015-raspiUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-48-generic-64kUpgrade linux-image-5.4.0-1047-bluefieldUpgrade linux-image-generic-64kUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.15.0-1018-kvmUpgrade linux-image-5.4.0-1084-gkeUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.4.0-1071-raspiUpgrade linux-image-5.4.0-128-genericUpgrade linux-image-oemUpgrade linux-image-5.4.0-1084-oracleUpgrade linux-image-aws-hweUpgrade linux-image-4.15.0-1107-oracleUpgrade linux-image-gkeUpgrade linux-image-lowlatency-64kUpgrade linux-image-4.15.0-1142-awsUpgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-128-lowlatencyUpgrade linux-image-aws-lts-20.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.15.0-1018-oracleUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-1054-gkeopUpgrade linux-image-gkeopUpgrade linux-image-5.4.0-1034-ibmUpgrade linux-image-4.15.0-1137-gcpUpgrade linux-image-azure-fdeUpgrade linux-image-genericUpgrade linux-image-5.15.0-1003-gkeopUpgrade linux-image-oracleUpgrade linux-image-ibmUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-virtualUpgrade linux-image-gkeop-5.4Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-1086-aws | Sep 21, 2022 | Jul 5, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 5, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub