The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The make_response function in drivers/block/xen-blkback/blkback.c in the Linux kernel before 4.11.8 allows guest OS users to obtain sensitive information from host OS (or other guest OS) kernel memory by leveraging the copying of uninitialized padding fields in Xen block-interface response structures, aka XSA-216.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade xen | Oct 27, 2017 | Jul 5, 2017 |
| Debian | — | Upgrade linuxUpgrade qemu | Jul 27, 2017 | Jul 4, 2017 |
| Huawei Euleros 2_0_sp1 | — | Upgrade kernel-headersUpgrade kernel-develUpgrade kernel-toolsUpgrade perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-debugUpgrade kernel-debuginfoUpgrade kernel | Nov 30, 2017 | Jul 4, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade perfUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernelUpgrade kernel-debug-develUpgrade kernel-debuginfoUpgrade kernel-tools-libsUpgrade kernel-debugUpgrade kernel-headersUpgrade kernel-devel | Nov 30, 2017 | Jul 4, 2017 |
| Suse | — | Upgrade qemu-armUpgrade qemu-seabiosUpgrade qemu-ppcUpgrade qemuUpgrade qemu-toolsUpgrade xen-libs-32bitUpgrade qemu-langUpgrade qemu-x86Upgrade qemu-guest-agentUpgrade xen-libsUpgrade xen-tools-domUUpgrade qemu-ipxeUpgrade qemu-vgabiosUpgrade qemu-sgabiosUpgrade qemu-s390Upgrade qemu-kvmUpgrade qemu-block-curlUpgrade xen-toolsUpgrade xen-kmp-defaultUpgrade xenUpgrade qemu-block-rbdUpgrade xen-doc-htmlUpgrade qemu-block-iscsiUpgrade qemu-block-ssh | Jul 6, 2017 | Jul 4, 2017 |
| Ubuntu | — | Upgrade linux-image-powerpc64-embUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.4.0-1076-raspi2Upgrade linux-image-4.4.0-98-powerpc64-embUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-98-powerpc-smpUpgrade qemu-system-x86Upgrade linux-image-gcpUpgrade linux-image-4.4.0-98-powerpc64-smpUpgrade qemu-system-miscUpgrade linux-image-raspi2Upgrade qemu-system-ppcUpgrade linux-image-4.4.0-98-generic-lpaeUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-3.13.0-135-powerpc-smpUpgrade qemu-system-aarch64Upgrade linux-image-4.10.0-38-genericUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-kvmUpgrade linux-image-awsUpgrade linux-image-4.10.0-1020-raspi2Upgrade linux-image-3.13.0-135-genericUpgrade linux-image-3.13.0-135-powerpc64-smpUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-4.4.0-1078-snapdragonUpgrade qemu-system-mipsUpgrade qemu-systemUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.4.0-98-powerpc-e500mcUpgrade linux-image-4.4.0-1009-kvmUpgrade linux-image-generic-lts-trustyUpgrade linux-image-genericUpgrade linux-image-3.13.0-135-generic-lpaeUpgrade linux-image-snapdragonUpgrade linux-image-4.4.0-98-lowlatencyUpgrade linux-image-lowlatencyUpgrade linux-image-4.10.0-38-generic-lpaeUpgrade qemu-system-s390xUpgrade linux-image-generic-lpaeUpgrade linux-image-3.13.0-135-powerpc-e500Upgrade linux-image-powerpc-e500Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.10.0-1008-gcpUpgrade qemu-system-sparcUpgrade qemu-system-armUpgrade linux-image-4.10.0-38-lowlatencyUpgrade linux-image-powerpc-smpUpgrade linux-image-4.4.0-1039-awsUpgrade linux-image-4.4.0-1033-gkeUpgrade linux-image-4.4.0-98-genericUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-3.13.0-135-powerpc64-embUpgrade linux-image-gkeUpgrade linux-image-3.13.0-135-lowlatencyUpgrade linux-image-3.13.0-135-powerpc-e500mcUpgrade linux-image-powerpc64-smpUpgrade linux-image-generic-lpae-lts-trustyUpgrade linux-image-powerpc-e500mc | Sep 13, 2017 | Jul 4, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 5, 2017 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub