Arm guests can cause Dom0 DoS via PV devices When mapping pages of guests on Arm, dom0 is using an rbtree to keep track of the foreign mappings. Updating of that rbtree is not always done completely with the related lock held, resulting in a small race window, which can be used by unprivileged guests via PV devices to cause inconsistencies of the rbtree. These inconsistencies can lead to Denial of Service (DoS) of dom0, e.g. by causing crashes or the inability to perform further mappings of other guests' memory pages.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade xen | Oct 1, 2024 | Jul 5, 2022 |
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-livepatch-4.14.287-215.504Upgrade bpftoolUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-livepatch-5.10.130-118.517Upgrade kernel-headersUpgrade kernelUpgrade kernel-devel | Sep 30, 2022 | Jul 5, 2022 |
| Amazon_linux | — | Upgrade kernel | Aug 5, 2022 | Jul 5, 2022 |
| Debian | — | Upgrade linux | Oct 3, 2022 | Jul 5, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-tools | Oct 11, 2022 | Jul 5, 2022 |
| Ubuntu | — | Upgrade linux-image-5.15.0-48-genericUpgrade linux-image-5.4.0-1034-ibmUpgrade linux-image-5.4.0-1076-kvmUpgrade linux-image-5.4.0-128-genericUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-dell300xUpgrade linux-image-intel-iotgUpgrade linux-image-bluefieldUpgrade linux-image-gkeUpgrade linux-image-5.15.0-48-lowlatency-64kUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1015-raspi-nolpaeUpgrade linux-image-4.15.0-1137-gcpUpgrade linux-image-raspi-nolpaeUpgrade linux-image-oem-20.04Upgrade linux-image-4.15.0-1054-dell300xUpgrade linux-image-5.15.0-1016-intel-iotgUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-1020-azureUpgrade linux-image-snapdragonUpgrade linux-image-awsUpgrade linux-image-kvmUpgrade linux-image-gke-5.4Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-oemUpgrade linux-image-oracleUpgrade linux-image-5.4.0-1047-bluefieldUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.15.0-1018-gcpUpgrade linux-image-5.15.0-1003-gkeopUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.4.0-128-generic-lpaeUpgrade linux-image-4.15.0-1128-kvmUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-4.15.0-1153-azureUpgrade linux-image-aws-lts-18.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.15.0-1020-awsUpgrade linux-image-5.15.0-48-lowlatencyUpgrade linux-image-4.15.0-1107-oracleUpgrade linux-image-5.15.0-1018-oracleUpgrade linux-image-gkeop-5.15Upgrade linux-image-4.15.0-1142-aws-hweUpgrade linux-image-5.4.0-1071-raspiUpgrade linux-image-5.4.0-1084-oracleUpgrade linux-image-5.15.0-1015-raspiUpgrade linux-image-5.4.0-1084-gkeUpgrade linux-image-5.15.0-1018-kvmUpgrade linux-image-4.15.0-1120-raspi2Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-aws-hweUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.4.0-128-lowlatencyUpgrade linux-image-azure-fdeUpgrade linux-image-4.15.0-194-genericUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.15.0-1016-gkeUpgrade linux-image-generic-64kUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-1015-ibmUpgrade linux-image-5.4.0-1086-awsUpgrade linux-image-5.4.0-1092-azure-fdeUpgrade linux-image-aws-lts-20.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-48-generic-lpaeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-1090-gcpUpgrade linux-image-raspi2Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-4.15.0-1138-snapdragonUpgrade linux-image-4.15.0-1142-awsUpgrade linux-image-gkeopUpgrade linux-image-4.15.0-194-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-azureUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-5.15.0-48-generic-64kUpgrade linux-image-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-gcpUpgrade linux-image-gke-5.15Upgrade linux-image-4.15.0-194-generic-lpaeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-ibmUpgrade linux-image-5.4.0-1054-gkeopUpgrade linux-image-genericUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-oem-osp1Upgrade linux-image-generic-hwe-22.04 | Sep 21, 2022 | Jul 5, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 5, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub