An issue was discovered in the Linux kernel through 5.10.1, as used with Xen through 4.14.x. The Linux kernel PV block backend expects the kernel thread handler to reset ring->xenblkd to NULL when stopped. However, the handler may not have time to run if the frontend quickly toggles between the states connect and disconnect. As a consequence, the block backend may re-use a pointer after it was freed. A misbehaving guest can trigger a dom0 crash by continuously connecting / disconnecting a block frontend. Privilege escalation and information leaks cannot be ruled out. This only affects systems with a Linux blkback.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade xenUpgrade linux-lts | Mar 26, 2024 | Dec 15, 2020 |
| Amazon Linux Ami 2 | — | Upgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-toolsUpgrade perfUpgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-4.14.214-160.339Upgrade kernel-headersUpgrade kernelUpgrade python-perf-debuginfo | Jan 27, 2021 | Dec 15, 2020 |
| Amazon_linux | — | Upgrade kernel | Jan 27, 2021 | Dec 15, 2020 |
| Debian | — | Upgrade linux | Feb 3, 2021 | Dec 15, 2020 |
| Gentoo Linux | — | Upgrade app-emulation/xen. | Jul 13, 2021 | Dec 15, 2020 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-abi-stablelists | Apr 20, 2022 | Dec 15, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-tools | Feb 8, 2021 | Dec 15, 2020 |
| Oracle_linux | — | Upgrade kernel-uek-debug-develUpgrade kernel-uek-docUpgrade kernel-uek-tools-libs-develUpgrade kernel-uek-debugUpgrade kernel-uek-headersUpgrade python-perfUpgrade perfUpgrade kernel-uek-toolsUpgrade kernel-uekUpgrade kernel-uek-tools-libsUpgrade kernel-uek-container-debugUpgrade kernel-uek-firmwareUpgrade kernel-uek-containerUpgrade kernel-uek-devel | Jan 13, 2021 | Dec 15, 2020 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-default-extraUpgrade kernel-defaultUpgrade kernel-obs-build | Jan 18, 2021 | Dec 15, 2020 |
| Ubuntu | — | Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-powerpc-smpUpgrade linux-image-oracleUpgrade linux-image-aws-lts-18.04Upgrade linux-image-kvmUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.15.0-136-lowlatencyUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-oem-20.04Upgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-aws-hweUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.4.0-204-lowlatencyUpgrade linux-image-4.4.0-204-powerpc-e500mcUpgrade linux-image-4.15.0-1065-oracleUpgrade linux-image-gkeUpgrade linux-image-5.8.0-1016-raspi-nolpaeUpgrade linux-image-azureUpgrade linux-image-oemUpgrade linux-image-4.4.0-1151-snapdragonUpgrade linux-image-snapdragonUpgrade linux-image-5.8.0-1019-kvmUpgrade linux-image-5.8.0-1021-oracleUpgrade linux-image-4.15.0-1079-gkeUpgrade linux-image-5.4.0-1033-kvmUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.4.0-204-genericUpgrade linux-image-powerpc64-smpUpgrade linux-image-5.8.0-44-generic-lpaeUpgrade linux-image-4.4.0-1123-awsUpgrade linux-image-raspiUpgrade linux-image-5.4.0-66-generic-lpaeUpgrade linux-image-4.15.0-1108-azureUpgrade linux-image-4.4.0-204-powerpc64-embUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-4.4.0-204-powerpc-smpUpgrade linux-image-4.15.0-136-genericUpgrade linux-image-4.4.0-204-powerpc64-smpUpgrade linux-image-5.8.0-1023-azureUpgrade linux-image-5.8.0-44-lowlatencyUpgrade linux-image-gke-5.4Upgrade linux-image-5.8.0-1023-gcpUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-4.15.0-1094-awsUpgrade linux-image-4.15.0-1079-raspi2Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.15.0-1096-snapdragonUpgrade linux-image-awsUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-dell300xUpgrade linux-image-generic-lpaeUpgrade linux-image-4.4.0-1089-kvmUpgrade linux-image-raspi-nolpaeUpgrade linux-image-raspi2Upgrade linux-image-5.8.0-44-genericUpgrade linux-image-5.8.0-1024-awsUpgrade linux-image-4.15.0-1012-dell300xUpgrade linux-image-genericUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.8.0-44-generic-64kUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.4.0-66-genericUpgrade linux-image-5.4.0-1038-oracleUpgrade linux-image-5.4.0-1037-gcpUpgrade linux-image-4.15.0-1093-gcpUpgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-oem-osp1Upgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-5.4.0-66-lowlatencyUpgrade linux-image-4.4.0-1087-awsUpgrade linux-image-4.15.0-136-generic-lpaeUpgrade linux-image-virtualUpgrade linux-image-generic-lts-xenialUpgrade linux-image-lowlatencyUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-5.4.0-1038-awsUpgrade linux-image-powerpc64-embUpgrade linux-image-4.4.0-204-generic-lpaeUpgrade linux-image-5.8.0-1016-raspiUpgrade linux-image-powerpc-e500mcUpgrade linux-image-gke-4.15Upgrade linux-image-gkeopUpgrade linux-image-gcpUpgrade linux-image-4.15.0-1085-kvmUpgrade linux-image-4.4.0-1147-raspi2Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-1036-gkeUpgrade linux-image-gkeop-5.4Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.4.0-1040-azureUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.4.0-1029-raspiUpgrade linux-image-generic-64kUpgrade linux-image-5.4.0-1010-gkeopUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-powerpc64-smp-lts-xenial | Feb 26, 2021 | Dec 15, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 15, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub