An issue was discovered in the Linux kernel through 5.10.1, as used with Xen through 4.14.x. The Linux kernel PV block backend expects the kernel thread handler to reset ring->xenblkd to NULL when stopped. However, the handler may not have time to run if the frontend quickly toggles between the states connect and disconnect. As a consequence, the block backend may re-use a pointer after it was freed. A misbehaving guest can trigger a dom0 crash by continuously connecting / disconnecting a block frontend. Privilege escalation and information leaks cannot be ruled out. This only affects systems with a Linux blkback.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade linux-ltsUpgrade xen | Mar 26, 2024 | Dec 15, 2020 |
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-toolsUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade perfUpgrade perf-debuginfoUpgrade python-perfUpgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-4.14.214-160.339Upgrade kernelUpgrade kernel-headers | Jan 27, 2021 | Dec 15, 2020 |
| Amazon_linux | — | Upgrade kernel | Jan 27, 2021 | Dec 15, 2020 |
| Debian | — | Upgrade linux | Feb 3, 2021 | Dec 15, 2020 |
| Gentoo Linux | — | Upgrade app-emulation/xen. | Jul 13, 2021 | Dec 15, 2020 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade python3-perf | Apr 20, 2022 | Dec 15, 2020 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel | Feb 8, 2021 | Dec 15, 2020 |
| Oracle_linux | — | Upgrade perfUpgrade kernel-uek-debug-develUpgrade kernel-uek-tools-libs-develUpgrade kernel-uek-debugUpgrade kernel-uek-docUpgrade kernel-uek-headersUpgrade python-perfUpgrade kernel-uek-tools-libsUpgrade kernel-uek-toolsUpgrade kernel-uek-container-debugUpgrade kernel-uek-develUpgrade kernel-uek-containerUpgrade kernel-uek-firmwareUpgrade kernel-uek | Jan 13, 2021 | Dec 15, 2020 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-default-extraUpgrade kernel-defaultUpgrade kernel-obs-build | Jan 18, 2021 | Dec 15, 2020 |
| Ubuntu | — | Upgrade linux-image-5.8.0-44-generic-lpaeUpgrade linux-image-5.8.0-44-lowlatencyUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-4.15.0-1096-snapdragonUpgrade linux-image-4.4.0-1123-awsUpgrade linux-image-4.4.0-204-lowlatencyUpgrade linux-image-4.4.0-1151-snapdragonUpgrade linux-image-dell300xUpgrade linux-image-raspiUpgrade linux-image-oemUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-powerpc-smpUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-4.15.0-1079-gkeUpgrade linux-image-4.4.0-204-powerpc64-embUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-gke-5.4Upgrade linux-image-5.8.0-1023-gcpUpgrade linux-image-5.8.0-1023-azureUpgrade linux-image-5.4.0-1033-kvmUpgrade linux-image-azure-lts-18.04Upgrade linux-image-4.15.0-1079-raspi2Upgrade linux-image-oracleUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-aws-hweUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.4.0-204-powerpc-e500mcUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-136-lowlatencyUpgrade linux-image-gkeUpgrade linux-image-awsUpgrade linux-image-5.8.0-1016-raspi-nolpaeUpgrade linux-image-kvmUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.8.0-1019-kvmUpgrade linux-image-oem-20.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.4.0-204-genericUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-4.15.0-136-genericUpgrade linux-image-4.15.0-1108-azureUpgrade linux-image-powerpc64-smpUpgrade linux-image-4.4.0-204-powerpc-smpUpgrade linux-image-4.15.0-1094-awsUpgrade linux-image-5.8.0-1021-oracleUpgrade linux-image-5.4.0-66-generic-lpaeUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-azureUpgrade linux-image-4.15.0-1065-oracleUpgrade linux-image-4.4.0-204-powerpc64-smpUpgrade linux-image-powerpc-smp-lts-xenialUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.4.0-1037-gcpUpgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-1093-gcpUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.8.0-1024-awsUpgrade linux-image-5.8.0-44-genericUpgrade linux-image-powerpc-e500mcUpgrade linux-image-5.4.0-1040-azureUpgrade linux-image-powerpc64-embUpgrade linux-image-4.4.0-204-generic-lpaeUpgrade linux-image-5.4.0-1038-awsUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-4.4.0-1087-awsUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.8.0-44-generic-64kUpgrade linux-image-4.15.0-136-generic-lpaeUpgrade linux-image-5.4.0-66-genericUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gcpUpgrade linux-image-gke-4.15Upgrade linux-image-4.15.0-1085-kvmUpgrade linux-image-5.4.0-1010-gkeopUpgrade linux-image-5.4.0-1036-gkeUpgrade linux-image-powerpc-e500mc-lts-xenialUpgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-1029-raspiUpgrade linux-image-genericUpgrade linux-image-gkeopUpgrade linux-image-virtualUpgrade linux-image-oem-osp1Upgrade linux-image-5.4.0-66-lowlatencyUpgrade linux-image-generic-lpae-hwe-16.04Upgrade linux-image-5.4.0-1038-oracleUpgrade linux-image-generic-64kUpgrade linux-image-4.4.0-1089-kvmUpgrade linux-image-generic-lts-xenialUpgrade linux-image-generic-lpae-lts-xenialUpgrade linux-image-4.15.0-1012-dell300xUpgrade linux-image-4.4.0-1147-raspi2Upgrade linux-image-5.8.0-1016-raspiUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-powerpc64-emb-lts-xenialUpgrade linux-image-raspi2Upgrade linux-image-powerpc64-smp-lts-xenialUpgrade linux-image-raspi-nolpae | Feb 26, 2021 | Dec 15, 2020 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 15, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub