An issue was discovered in the Linux kernel through 5.10.1, as used with Xen through 4.14.x. The Linux kernel PV block backend expects the kernel thread handler to reset ring->xenblkd to NULL when stopped. However, the handler may not have time to run if the frontend quickly toggles between the states connect and disconnect. As a consequence, the block backend may re-use a pointer after it was freed. A misbehaving guest can trigger a dom0 crash by continuously connecting / disconnecting a block frontend. Privilege escalation and information leaks cannot be ruled out. This only affects systems with a Linux blkback.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade xenUpgrade linux-lts | Mar 26, 2024 | Dec 15, 2020 |
| Amazon Linux Ami 2 | — | Upgrade kernel-toolsUpgrade perf-debuginfoUpgrade kernel-tools-develUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernelUpgrade python-perfUpgrade kernel-headersUpgrade kernel-livepatch-4.14.214-160.339Upgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfo | Jan 27, 2021 | Dec 15, 2020 |
| Amazon_linux | — | Upgrade kernel | Jan 27, 2021 | Dec 15, 2020 |
| Debian | — | Upgrade linux | Feb 3, 2021 | Dec 15, 2020 |
| Gentoo Linux | — | Upgrade app-emulation/xen. | Jul 13, 2021 | Dec 15, 2020 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-abi-stablelists | Apr 20, 2022 | Dec 15, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-tools | Feb 8, 2021 | Dec 15, 2020 |
| Oracle_linux | — | Upgrade kernel-uek-toolsUpgrade kernel-uek-tools-libsUpgrade kernel-uek-container-debugUpgrade kernel-uek-develUpgrade kernel-uekUpgrade kernel-uek-containerUpgrade kernel-uek-firmwareUpgrade kernel-uek-docUpgrade perfUpgrade kernel-uek-tools-libs-develUpgrade kernel-uek-debugUpgrade python-perfUpgrade kernel-uek-debug-develUpgrade kernel-uek-headers | Jan 13, 2021 | Dec 15, 2020 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-docsUpgrade kernel-obs-buildUpgrade kernel-default | Jan 18, 2021 | Dec 15, 2020 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1012-dell300xUpgrade linux-image-5.4.0-1010-gkeopUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-64kUpgrade linux-image-4.4.0-1147-raspi2Upgrade linux-image-5.8.0-44-genericUpgrade linux-image-5.8.0-1024-awsUpgrade linux-image-4.15.0-1085-kvmUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.4.0-1038-oracleUpgrade linux-image-5.8.0-1016-raspiUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-raspi2Upgrade linux-image-4.15.0-1093-gcpUpgrade linux-image-4.4.0-1087-awsUpgrade linux-image-generic-lpaeUpgrade linux-image-gkeop-5.4Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-powerpc64-embUpgrade linux-image-gkeopUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-4.4.0-204-generic-lpaeUpgrade linux-image-4.4.0-1089-kvmUpgrade linux-image-genericUpgrade linux-image-5.4.0-1036-gkeUpgrade linux-image-5.4.0-1040-azureUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-powerpc-e500mcUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-136-generic-lpaeUpgrade linux-image-virtualUpgrade linux-image-5.4.0-1038-awsUpgrade linux-image-gcpUpgrade linux-image-5.4.0-1037-gcpUpgrade linux-image-5.4.0-66-genericUpgrade linux-image-oem-osp1Upgrade linux-image-gke-4.15Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.8.0-44-generic-64kUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-5.4.0-66-lowlatencyUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-5.4.0-1029-raspiUpgrade linux-image-generic-lts-xenialUpgrade linux-image-awsUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.8.0-1021-oracleUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.4.0-204-genericUpgrade linux-image-raspiUpgrade linux-image-5.4.0-66-generic-lpaeUpgrade linux-image-azure-lts-18.04Upgrade linux-image-5.8.0-1019-kvmUpgrade linux-image-aws-hweUpgrade linux-image-4.15.0-136-lowlatencyUpgrade linux-image-aws-lts-18.04Upgrade linux-image-oemUpgrade linux-image-snapdragonUpgrade linux-image-oem-20.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.8.0-1016-raspi-nolpaeUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.4.0-204-powerpc-e500mcUpgrade linux-image-gkeUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.4.0-1151-snapdragonUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-4.15.0-1079-raspi2Upgrade linux-image-5.8.0-44-lowlatencyUpgrade linux-image-4.4.0-204-powerpc64-embUpgrade linux-image-4.4.0-204-lowlatencyUpgrade linux-image-4.4.0-1123-awsUpgrade linux-image-4.15.0-1096-snapdragonUpgrade linux-image-4.4.0-204-powerpc64-smpUpgrade linux-image-5.8.0-44-generic-lpaeUpgrade linux-image-oracleUpgrade linux-image-5.4.0-1033-kvmUpgrade linux-image-dell300xUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.15.0-1108-azureUpgrade linux-image-4.4.0-204-powerpc-smpUpgrade linux-image-4.15.0-136-genericUpgrade linux-image-5.8.0-1023-azureUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gke-5.4Upgrade linux-image-4.15.0-1094-awsUpgrade linux-image-5.8.0-1023-gcpUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-kvmUpgrade linux-image-powerpc64-smpUpgrade linux-image-azureUpgrade linux-image-4.15.0-1065-oracleUpgrade linux-image-powerpc-smpUpgrade linux-image-4.15.0-1079-gke | Feb 26, 2021 | Dec 15, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 15, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub