The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
An issue was discovered in Xen through 4.13.x, allowing guest OS users to cause a denial of service because of a bad error path in GNTTABOP_map_grant. Grant table operations are expected to return 0 for success, and a negative number for errors. Some misplaced brackets cause one error path to return 1 instead of a negative value. The grant table code in Linux treats this condition as success, and proceeds with incorrectly initialised state. A buggy or malicious guest can construct its grant table in such a way that, when a backend domain tries to map a grant, it hits the incorrect error path. This will crash a Linux based dom0 or backend domain.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade xen | Jun 16, 2020 | Apr 14, 2020 |
| Debian | — | Upgrade xen | Jul 14, 2020 | Apr 14, 2020 |
| Gentoo Linux | — | Upgrade app-emulation/xen.Upgrade app-emulation/xen-tools. | Jun 15, 2020 | Apr 14, 2020 |
| Suse | — | Upgrade xenUpgrade xen-tools-domUUpgrade xen-tools-xendomains-wait-diskUpgrade xen-doc-htmlUpgrade xen-develUpgrade xen-libs-32bitUpgrade xen-libsUpgrade xen-tools | May 1, 2020 | Apr 14, 2020 |
| Ubuntu | — | Upgrade libxendevicemodel1Upgrade libxenevtchn1Upgrade xen-utils-4.11Upgrade xen-hypervisor-4.11-arm64Upgrade xenstore-utilsUpgrade libxengnttab1Upgrade libxenmisc4.11Upgrade xen-hypervisor-4.11-armhfUpgrade xen-utils-commonUpgrade xen-hypervisor-4.11-amd64 | Sep 20, 2022 | Apr 14, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub