The make_response function in drivers/block/xen-blkback/blkback.c in the Linux kernel before 4.11.8 allows guest OS users to obtain sensitive information from host OS (or other guest OS) kernel memory by leveraging the copying of uninitialized padding fields in Xen block-interface response structures, aka XSA-216.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade xen | Oct 27, 2017 | Jul 5, 2017 |
| Debian | — | Upgrade qemuUpgrade linux | Jul 27, 2017 | Jul 4, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade kernel-headersUpgrade kernel-toolsUpgrade perfUpgrade kernel-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debugUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-debuginfoUpgrade kernel | Nov 30, 2017 | Jul 4, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade kernelUpgrade kernel-toolsUpgrade python-perfUpgrade perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade kernel-headersUpgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade kernel-debug | Nov 30, 2017 | Jul 4, 2017 |
| Suse | — | Upgrade qemu-block-iscsiUpgrade xenUpgrade xen-kmp-defaultUpgrade qemu-block-sshUpgrade xen-libs-32bitUpgrade qemu-block-curlUpgrade xen-doc-htmlUpgrade xen-toolsUpgrade qemu-sgabiosUpgrade qemu-ipxeUpgrade xen-tools-domUUpgrade qemu-guest-agentUpgrade xen-libsUpgrade qemu-s390Upgrade qemu-block-rbdUpgrade qemu-x86Upgrade qemu-kvmUpgrade qemu-vgabiosUpgrade qemu-langUpgrade qemu-armUpgrade qemu-ppcUpgrade qemuUpgrade qemu-toolsUpgrade qemu-seabios | Jul 6, 2017 | Jul 4, 2017 |
| Ubuntu | — | Upgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.4.0-98-powerpc64-smpUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-powerpc64-embUpgrade linux-image-3.13.0-135-powerpc-smpUpgrade linux-image-generic-lpae-hwe-16.04Upgrade qemu-system-mipsUpgrade linux-image-4.10.0-38-genericUpgrade qemu-system-miscUpgrade linux-image-3.13.0-135-powerpc64-smpUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-gcpUpgrade linux-image-kvmUpgrade linux-image-4.4.0-98-powerpc-smpUpgrade qemu-system-aarch64Upgrade linux-image-4.4.0-1076-raspi2Upgrade qemu-system-x86Upgrade linux-image-3.13.0-135-genericUpgrade linux-image-4.10.0-1020-raspi2Upgrade linux-image-4.4.0-98-powerpc64-embUpgrade linux-image-awsUpgrade linux-image-raspi2Upgrade qemu-systemUpgrade qemu-system-ppcUpgrade linux-image-4.4.0-1078-snapdragonUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-98-generic-lpaeUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-lowlatencyUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.4.0-1033-gkeUpgrade linux-image-3.13.0-135-generic-lpaeUpgrade qemu-system-armUpgrade linux-image-generic-lts-trustyUpgrade linux-image-3.13.0-135-lowlatencyUpgrade linux-image-genericUpgrade linux-image-powerpc-e500mcUpgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-98-genericUpgrade linux-image-snapdragonUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-3.13.0-135-powerpc-e500Upgrade linux-image-3.13.0-135-powerpc-e500mcUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.4.0-98-powerpc-e500mcUpgrade linux-image-generic-lpaeUpgrade qemu-system-s390xUpgrade linux-image-4.4.0-1039-awsUpgrade linux-image-gkeUpgrade linux-image-3.13.0-135-powerpc64-embUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-98-lowlatencyUpgrade linux-image-4.10.0-1008-gcpUpgrade linux-image-powerpc-e500Upgrade linux-image-4.10.0-38-lowlatencyUpgrade linux-image-4.10.0-38-generic-lpaeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.4.0-1009-kvmUpgrade qemu-system-sparc | Sep 13, 2017 | Jul 4, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 5, 2017 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub