An issue was discovered in the Linux kernel through 5.10.1, as used with Xen through 4.14.x. The Linux kernel PV block backend expects the kernel thread handler to reset ring->xenblkd to NULL when stopped. However, the handler may not have time to run if the frontend quickly toggles between the states connect and disconnect. As a consequence, the block backend may re-use a pointer after it was freed. A misbehaving guest can trigger a dom0 crash by continuously connecting / disconnecting a block frontend. Privilege escalation and information leaks cannot be ruled out. This only affects systems with a Linux blkback.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade xenUpgrade linux-lts | Mar 26, 2024 | Dec 15, 2020 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-4.14.214-160.339Upgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernelUpgrade kernel-headersUpgrade python-perfUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade perf | Jan 27, 2021 | Dec 15, 2020 |
| Amazon_linux | — | Upgrade kernel | Jan 27, 2021 | Dec 15, 2020 |
| Debian | — | Upgrade linux | Feb 3, 2021 | Dec 15, 2020 |
| Gentoo Linux | — | Upgrade app-emulation/xen. | Jul 13, 2021 | Dec 15, 2020 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-tools | Apr 20, 2022 | Dec 15, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perf | Feb 8, 2021 | Dec 15, 2020 |
| Oracle_linux | — | Upgrade kernel-uek-docUpgrade kernel-uek-debugUpgrade kernel-uek-tools-libs-develUpgrade kernel-uek-debug-develUpgrade kernel-uek-headersUpgrade python-perfUpgrade perfUpgrade kernel-uek-containerUpgrade kernel-uek-firmwareUpgrade kernel-uek-container-debugUpgrade kernel-uekUpgrade kernel-uek-tools-libsUpgrade kernel-uek-develUpgrade kernel-uek-tools | Jan 13, 2021 | Dec 15, 2020 |
| Suse | — | Upgrade kernel-obs-buildUpgrade kernel-default-extraUpgrade kernel-docsUpgrade kernel-default | Jan 18, 2021 | Dec 15, 2020 |
| Ubuntu | — | Upgrade linux-image-5.8.0-1023-azureUpgrade linux-image-azureUpgrade linux-image-5.8.0-1023-gcpUpgrade linux-image-aws-hweUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-gke-5.4Upgrade linux-image-4.15.0-1079-gkeUpgrade linux-image-oem-20.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-awsUpgrade linux-image-snapdragonUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-oemUpgrade linux-image-5.8.0-1021-oracleUpgrade linux-image-5.4.0-1033-kvmUpgrade linux-image-raspiUpgrade linux-image-4.4.0-204-genericUpgrade linux-image-4.4.0-1151-snapdragonUpgrade linux-image-5.4.0-66-generic-lpaeUpgrade linux-image-4.15.0-1094-awsUpgrade linux-image-4.4.0-204-powerpc-smpUpgrade linux-image-4.15.0-1096-snapdragonUpgrade linux-image-4.15.0-136-genericUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-kvmUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-oracleUpgrade linux-image-4.15.0-1108-azureUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-gkeUpgrade linux-image-5.8.0-1016-raspi-nolpaeUpgrade linux-image-4.4.0-204-powerpc-e500mcUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.15.0-1065-oracleUpgrade linux-image-aws-lts-18.04Upgrade linux-image-powerpc-smpUpgrade linux-image-5.8.0-1019-kvmUpgrade linux-image-4.15.0-136-lowlatencyUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-dell300xUpgrade linux-image-4.4.0-204-lowlatencyUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.8.0-44-generic-lpaeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.4.0-204-powerpc64-embUpgrade linux-image-5.8.0-44-lowlatencyUpgrade linux-image-4.4.0-204-powerpc64-smpUpgrade linux-image-4.4.0-1123-awsUpgrade linux-image-4.15.0-1079-raspi2Upgrade linux-image-5.4.0-1040-azureUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.8.0-1016-raspiUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-raspi2Upgrade linux-image-4.15.0-1093-gcpUpgrade linux-image-5.8.0-1024-awsUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.8.0-44-genericUpgrade linux-image-4.4.0-1087-awsUpgrade linux-image-gkeop-5.4Upgrade linux-image-generic-lpaeUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.4.0-1029-raspiUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-5.8.0-44-generic-64kUpgrade linux-image-gkeopUpgrade linux-image-5.4.0-66-genericUpgrade linux-image-4.4.0-1089-kvmUpgrade linux-image-powerpc64-embUpgrade linux-image-5.4.0-1037-gcpUpgrade linux-image-gcpUpgrade linux-image-generic-64kUpgrade linux-image-4.4.0-1147-raspi2Upgrade linux-image-4.15.0-1012-dell300xUpgrade linux-image-genericUpgrade linux-image-5.4.0-1038-oracleUpgrade linux-image-5.4.0-1010-gkeopUpgrade linux-image-4.15.0-1085-kvmUpgrade linux-image-5.4.0-1036-gkeUpgrade linux-image-gke-4.15Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-lowlatencyUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-5.4.0-1038-awsUpgrade linux-image-oem-osp1Upgrade linux-image-virtualUpgrade linux-image-4.4.0-204-generic-lpaeUpgrade linux-image-4.15.0-136-generic-lpaeUpgrade linux-image-powerpc-e500mcUpgrade linux-image-generic-lts-xenialUpgrade linux-image-5.4.0-66-lowlatencyUpgrade linux-image-virtual-hwe-16.04 | Feb 26, 2021 | Dec 15, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 15, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub