An issue was discovered in the Linux kernel through 5.10.1, as used with Xen through 4.14.x. The Linux kernel PV block backend expects the kernel thread handler to reset ring->xenblkd to NULL when stopped. However, the handler may not have time to run if the frontend quickly toggles between the states connect and disconnect. As a consequence, the block backend may re-use a pointer after it was freed. A misbehaving guest can trigger a dom0 crash by continuously connecting / disconnecting a block frontend. Privilege escalation and information leaks cannot be ruled out. This only affects systems with a Linux blkback.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade xenUpgrade linux-lts | Mar 26, 2024 | Dec 15, 2020 |
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade kernelUpgrade python-perfUpgrade kernel-headersUpgrade kernel-livepatch-4.14.214-160.339Upgrade kernel-debuginfo-common-x86_64Upgrade perfUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools | Jan 27, 2021 | Dec 15, 2020 |
| Amazon_linux | — | Upgrade kernel | Jan 27, 2021 | Dec 15, 2020 |
| Debian | — | Upgrade linux | Feb 3, 2021 | Dec 15, 2020 |
| Gentoo Linux | — | Upgrade app-emulation/xen. | Jul 13, 2021 | Dec 15, 2020 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel | Apr 20, 2022 | Dec 15, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libs | Feb 8, 2021 | Dec 15, 2020 |
| Oracle_linux | — | Upgrade kernel-uek-docUpgrade perfUpgrade kernel-uek-headersUpgrade kernel-uek-debugUpgrade kernel-uek-debug-develUpgrade python-perfUpgrade kernel-uek-tools-libs-develUpgrade kernel-uek-toolsUpgrade kernel-uek-containerUpgrade kernel-uek-tools-libsUpgrade kernel-uek-firmwareUpgrade kernel-uek-container-debugUpgrade kernel-uek-develUpgrade kernel-uek | Jan 13, 2021 | Dec 15, 2020 |
| Suse | — | Upgrade kernel-default-extraUpgrade kernel-obs-buildUpgrade kernel-docsUpgrade kernel-default | Jan 18, 2021 | Dec 15, 2020 |
| Ubuntu | — | Upgrade linux-image-4.4.0-1151-snapdragonUpgrade linux-image-powerpc64-smpUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.8.0-1021-oracleUpgrade linux-image-azure-lts-18.04Upgrade linux-image-4.15.0-1065-oracleUpgrade linux-image-4.4.0-204-powerpc-smpUpgrade linux-image-4.15.0-136-genericUpgrade linux-image-4.15.0-1096-snapdragonUpgrade linux-image-4.15.0-1094-awsUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-4.15.0-1108-azureUpgrade linux-image-5.4.0-66-generic-lpaeUpgrade linux-image-4.15.0-136-lowlatencyUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-4.4.0-204-powerpc64-embUpgrade linux-image-5.8.0-1023-gcpUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.8.0-1019-kvmUpgrade linux-image-oracleUpgrade linux-image-4.4.0-204-powerpc64-smpUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.8.0-1016-raspi-nolpaeUpgrade linux-image-4.15.0-1079-raspi2Upgrade linux-image-4.4.0-204-lowlatencyUpgrade linux-image-4.4.0-204-powerpc-e500mcUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-gkeUpgrade linux-image-azureUpgrade linux-image-awsUpgrade linux-image-aws-hweUpgrade linux-image-snapdragonUpgrade linux-image-5.8.0-1023-azureUpgrade linux-image-oem-20.04Upgrade linux-image-gke-5.4Upgrade linux-image-4.15.0-1079-gkeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-kvmUpgrade linux-image-oemUpgrade linux-image-aws-lts-18.04Upgrade linux-image-powerpc-smpUpgrade linux-image-5.8.0-44-lowlatencyUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-4.4.0-1123-awsUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.4.0-204-genericUpgrade linux-image-dell300xUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.8.0-44-generic-lpaeUpgrade linux-image-5.4.0-1033-kvmUpgrade linux-image-raspiUpgrade linux-image-4.4.0-1147-raspi2Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-5.8.0-1016-raspiUpgrade linux-image-powerpc64-embUpgrade linux-image-5.8.0-44-genericUpgrade linux-image-virtualUpgrade linux-image-4.4.0-1087-awsUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-raspi2Upgrade linux-image-raspi-nolpaeUpgrade linux-image-4.4.0-204-generic-lpaeUpgrade linux-image-4.15.0-1093-gcpUpgrade linux-image-gke-4.15Upgrade linux-image-5.8.0-1024-awsUpgrade linux-image-5.4.0-1040-azureUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-powerpc-e500mcUpgrade linux-image-generic-lpaeUpgrade linux-image-gkeop-5.4Upgrade linux-image-generic-64kUpgrade linux-image-5.4.0-1036-gkeUpgrade linux-image-genericUpgrade linux-image-4.15.0-1085-kvmUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.4.0-1089-kvmUpgrade linux-image-5.8.0-44-generic-64kUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-4.15.0-1012-dell300xUpgrade linux-image-5.4.0-66-genericUpgrade linux-image-gkeopUpgrade linux-image-gcpUpgrade linux-image-generic-lts-xenialUpgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-1010-gkeopUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-1037-gcpUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-1029-raspiUpgrade linux-image-oem-osp1Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-5.4.0-66-lowlatencyUpgrade linux-image-4.15.0-136-generic-lpaeUpgrade linux-image-5.4.0-1038-oracleUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-5.4.0-1038-aws | Feb 26, 2021 | Dec 15, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 15, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub