An issue was discovered in the Linux kernel through 5.10.1, as used with Xen through 4.14.x. The Linux kernel PV block backend expects the kernel thread handler to reset ring->xenblkd to NULL when stopped. However, the handler may not have time to run if the frontend quickly toggles between the states connect and disconnect. As a consequence, the block backend may re-use a pointer after it was freed. A misbehaving guest can trigger a dom0 crash by continuously connecting / disconnecting a block frontend. Privilege escalation and information leaks cannot be ruled out. This only affects systems with a Linux blkback.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade linux-ltsUpgrade xen | Mar 26, 2024 | Dec 15, 2020 |
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-toolsUpgrade kernel-develUpgrade perf-debuginfoUpgrade python-perf-debuginfoUpgrade kernelUpgrade kernel-headersUpgrade kernel-livepatch-4.14.214-160.339Upgrade kernel-debuginfo-common-x86_64Upgrade python-perf | Jan 27, 2021 | Dec 15, 2020 |
| Amazon_linux | — | Upgrade kernel | Jan 27, 2021 | Dec 15, 2020 |
| Debian | — | Upgrade linux | Feb 3, 2021 | Dec 15, 2020 |
| Gentoo Linux | — | Upgrade app-emulation/xen. | Jul 13, 2021 | Dec 15, 2020 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libs | Apr 20, 2022 | Dec 15, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel | Feb 8, 2021 | Dec 15, 2020 |
| Oracle_linux | — | Upgrade kernel-uek-toolsUpgrade kernel-uekUpgrade kernel-uek-develUpgrade kernel-uek-firmwareUpgrade kernel-uek-containerUpgrade kernel-uek-tools-libsUpgrade kernel-uek-container-debugUpgrade kernel-uek-debugUpgrade kernel-uek-docUpgrade python-perfUpgrade kernel-uek-headersUpgrade perfUpgrade kernel-uek-tools-libs-develUpgrade kernel-uek-debug-devel | Jan 13, 2021 | Dec 15, 2020 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-default-extraUpgrade kernel-docsUpgrade kernel-obs-build | Jan 18, 2021 | Dec 15, 2020 |
| Ubuntu | — | Upgrade linux-image-powerpc64-embUpgrade linux-image-oem-osp1Upgrade linux-image-5.4.0-1040-azureUpgrade linux-image-generic-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-4.4.0-1089-kvmUpgrade linux-image-virtualUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-5.8.0-44-generic-64kUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-1036-gkeUpgrade linux-image-5.4.0-66-genericUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-4.15.0-1085-kvmUpgrade linux-image-generic-lts-xenialUpgrade linux-image-4.15.0-1093-gcpUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-5.4.0-1037-gcpUpgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-5.4.0-1029-raspiUpgrade linux-image-gkeop-5.4Upgrade linux-image-4.15.0-136-generic-lpaeUpgrade linux-image-5.8.0-1016-raspiUpgrade linux-image-5.4.0-66-lowlatencyUpgrade linux-image-powerpc-e500mcUpgrade linux-image-5.4.0-1038-awsUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-gcpUpgrade linux-image-5.4.0-1038-oracleUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-gke-4.15Upgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-1012-dell300xUpgrade linux-image-gkeopUpgrade linux-image-5.8.0-1024-awsUpgrade linux-image-4.4.0-1147-raspi2Upgrade linux-image-genericUpgrade linux-image-5.4.0-1010-gkeopUpgrade linux-image-4.4.0-204-generic-lpaeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-4.4.0-1087-awsUpgrade linux-image-raspi-nolpaeUpgrade linux-image-raspi2Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.8.0-44-genericUpgrade linux-image-oracleUpgrade linux-image-oem-20.04Upgrade linux-image-4.4.0-1151-snapdragonUpgrade linux-image-5.8.0-44-generic-lpaeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.8.0-1019-kvmUpgrade linux-image-5.8.0-1021-oracleUpgrade linux-image-azureUpgrade linux-image-kvmUpgrade linux-image-4.15.0-1065-oracleUpgrade linux-image-4.4.0-204-powerpc-e500mcUpgrade linux-image-snapdragonUpgrade linux-image-5.8.0-1016-raspi-nolpaeUpgrade linux-image-aws-hweUpgrade linux-image-5.8.0-1023-gcpUpgrade linux-image-gke-5.4Upgrade linux-image-awsUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.8.0-1023-azureUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.15.0-1079-raspi2Upgrade linux-image-4.4.0-1123-awsUpgrade linux-image-4.4.0-204-powerpc-smpUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.15.0-1079-gkeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-dell300xUpgrade linux-image-4.4.0-204-powerpc64-smpUpgrade linux-image-5.4.0-1033-kvmUpgrade linux-image-powerpc64-smpUpgrade linux-image-powerpc-smpUpgrade linux-image-4.15.0-136-lowlatencyUpgrade linux-image-aws-lts-18.04Upgrade linux-image-oemUpgrade linux-image-gkeUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.4.0-204-powerpc64-embUpgrade linux-image-4.15.0-1108-azureUpgrade linux-image-5.4.0-66-generic-lpaeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-4.4.0-204-genericUpgrade linux-image-4.15.0-136-genericUpgrade linux-image-5.8.0-44-lowlatencyUpgrade linux-image-4.4.0-204-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.15.0-1096-snapdragonUpgrade linux-image-4.15.0-1094-aws | Feb 26, 2021 | Dec 15, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 15, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub