The dispatch_discard_io function in drivers/block/xen-blkback/blkback.c in the Xen blkback implementation in the Linux kernel before 3.10.5 allows guest OS users to cause a denial of service (data loss) via filesystem write operations on a read-only disk that supports the (1) BLKIF_OP_DISCARD (aka discard or TRIM) or (2) SCSI UNMAP feature.
CVSS Details
- CVSS 3.1 Base Score: 4.6
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Sep 25, 2013 |
| Oracle_linux | — | Upgrade kernel-uek | Oct 16, 2024 | Sep 25, 2013 |
| Ubuntu | — | Upgrade linux-image-3.2.0-57-powerpc-smpUpgrade linux-image-3.5.0-40-powerpc-smpUpgrade linux-image-3.8.0-30-genericUpgrade linux-image-3.2.0-57-omapUpgrade linux-image-3.5.0-40-omapUpgrade linux-image-3.2.0-57-generic-paeUpgrade linux-image-3.2.0-57-genericUpgrade linux-image-3.5.0-40-powerpc64-smpUpgrade linux-image-3.2.0-1441-omap4Upgrade linux-image-3.5.0-40-genericUpgrade linux-image-3.2.0-57-highbankUpgrade linux-image-3.5.0-40-highbankUpgrade linux-image-3.2.0-57-virtualUpgrade linux-image-3.2.0-57-powerpc64-smpUpgrade linux-image-3.5.0-232-omap4 | Nov 8, 2024 | Sep 25, 2013 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub