The fix for XSA-365 includes initialization of pointers such that subsequent cleanup code wouldn't use uninitialized or stale values. This initialization went too far and may under certain conditions also overwrite pointers which are in need of cleaning up. The lack of cleanup would result in leaking persistent grants. The leak in turn would prevent fully cleaning up after a respective guest has died, leaving around zombie domains. All Linux versions having the fix for XSA-365 applied are vulnerable. XSA-365 was classified to affect versions back to at least 3.11.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-4.14.231-173.360Upgrade kernel-toolsUpgrade kernel-develUpgrade bpftoolUpgrade bpftool-debuginfoUpgrade python-perfUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-tools-develUpgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-headersUpgrade kernelUpgrade kernel-debuginfo-common-x86_64 | Apr 23, 2021 | Apr 6, 2021 |
| Amazon_linux | — | Upgrade kernel | May 26, 2021 | Apr 6, 2021 |
| Debian | — | Upgrade linux | Jun 23, 2021 | Apr 6, 2021 |
| Huawei Euleros 2_0_sp8 | — | Upgrade kernelUpgrade kernel-headersUpgrade perfUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-develUpgrade bpftoolUpgrade kernel-tools-libsUpgrade python-perfUpgrade kernel-source | Jun 28, 2021 | Apr 6, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade python3-perf | Jul 2, 2021 | Apr 6, 2021 |
| Oracle_linux | — | Upgrade kernel-uekUpgrade kernel-uek-develUpgrade kernel-uek-containerUpgrade kernel-uek-firmwareUpgrade kernel-uek-container-debugUpgrade kernel-uek-tools-libs-develUpgrade perfUpgrade kernel-uek-headersUpgrade python-perfUpgrade kernel-uek-toolsUpgrade kernel-uek-tools-libsUpgrade kernel-uek-debug-develUpgrade kernel-uek-docUpgrade kernel-uek-debug | May 6, 2021 | Apr 6, 2021 |
| Suse | — | Upgrade kernel-source-azureUpgrade reiserfs-kmp-preemptUpgrade kgraft-patch-4_4_180-94_153-defaultUpgrade gfs2-kmp-azureUpgrade kernel-obs-buildUpgrade kselftests-kmp-64kbUpgrade kgraft-patch-4_4_180-94_141-defaultUpgrade kernel-64kb-develUpgrade dlm-kmp-rt_debugUpgrade kernel-devel-rtUpgrade kernel-sourceUpgrade kernel-vanilla-baseUpgrade dlm-kmp-rtUpgrade ocfs2-kmp-rt_debugUpgrade kernel-source-vanillaUpgrade kernel-rt-extraUpgrade kernel-preempt-develUpgrade gfs2-kmp-defaultUpgrade kernel-default-base-rebuildUpgrade kernel-default-develUpgrade kernel-debugUpgrade kernel-default-livepatch-develUpgrade dlm-kmp-64kbUpgrade gfs2-kmp-preemptUpgrade kernel-azureUpgrade kgraft-patch-4_4_180-94_164-defaultUpgrade kernel-default-livepatchUpgrade kernel-default-optionalUpgrade cluster-md-kmp-rtUpgrade kgraft-patch-4_4_180-94_156-defaultUpgrade kernel-rt-develUpgrade kernel-preempt-extraUpgrade kernel-source-rtUpgrade ocfs2-kmp-defaultUpgrade kernel-preempt-livepatch-develUpgrade kernel-preempt-optionalUpgrade cluster-md-kmp-azureUpgrade kernel-rt_debug-develUpgrade kernel-debug-develUpgrade kernel-64kb-extraUpgrade ocfs2-kmp-azureUpgrade cluster-md-kmp-preemptUpgrade kselftests-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade kernel-develUpgrade kgraft-patch-4_4_180-94_150-defaultUpgrade kernel-64kbUpgrade dlm-kmp-preemptUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-64kbUpgrade reiserfs-kmp-64kbUpgrade kernel-preemptUpgrade kernel-kvmsmall-livepatch-develUpgrade kselftests-kmp-preemptUpgrade reiserfs-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade cluster-md-kmp-rt_debugUpgrade kernel-kvmsmallUpgrade kernel-azure-baseUpgrade kgraft-patch-4_4_180-94_130-defaultUpgrade kgraft-patch-4_4_180-94_138-defaultUpgrade reiserfs-kmp-rt_debugUpgrade kgraft-patch-4_4_180-94_144-defaultUpgrade kernel-rt_debug-extraUpgrade kselftests-kmp-rtUpgrade kernel-azure-extraUpgrade kselftests-kmp-defaultUpgrade kernel-default-kgraftUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-64kbUpgrade kgraft-patch-4_4_180-94_161-defaultUpgrade kgraft-patch-4_4_180-94_127-defaultUpgrade kernel-default-baseUpgrade kernel-debug-livepatch-develUpgrade kgraft-patch-4_4_180-94_121-defaultUpgrade cluster-md-kmp-defaultUpgrade gfs2-kmp-rtUpgrade kernel-syms-azureUpgrade kernel-zfcpdumpUpgrade kernel-docs-htmlUpgrade kgraft-patch-4_4_180-94_116-defaultUpgrade kernel-kvmsmall-develUpgrade kernel-devel-azureUpgrade kernel-docsUpgrade kselftests-kmp-rt_debugUpgrade gfs2-kmp-rt_debugUpgrade kernel-default-extraUpgrade kernel-obs-qaUpgrade kernel-macrosUpgrade ocfs2-kmp-preemptUpgrade kernel-default-manUpgrade kernel-defaultUpgrade kernel-azure-livepatch-develUpgrade kernel-64kb-livepatch-develUpgrade ocfs2-kmp-rtUpgrade kgraft-patch-4_4_180-94_147-defaultUpgrade kgraft-patch-4_4_180-94_124-defaultUpgrade kernel-symsUpgrade kernel-rt_debugUpgrade kgraft-patch-4_4_180-94_135-defaultUpgrade kernel-azure-develUpgrade kernel-syms-rtUpgrade kernel-rtUpgrade dlm-kmp-azureUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-rt | Apr 10, 2021 | Apr 6, 2021 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1099-gcpUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-aws-hweUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.4.0-1044-gkeUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.8.0-1035-awsUpgrade linux-image-generic-lts-xenialUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-143-genericUpgrade linux-image-awsUpgrade linux-image-5.4.0-1044-gcpUpgrade linux-image-4.15.0-1018-dell300xUpgrade linux-image-5.8.0-1026-raspi-nolpaeUpgrade linux-image-4.15.0-1085-raspi2Upgrade linux-image-oemUpgrade linux-image-raspi-nolpaeUpgrade linux-image-4.4.0-1102-awsUpgrade linux-image-4.15.0-1071-oracleUpgrade linux-image-4.4.0-1138-awsUpgrade linux-image-oracleUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-generic-lpaeUpgrade linux-image-5.8.0-1026-raspiUpgrade linux-image-5.4.0-74-generic-lpaeUpgrade linux-image-5.4.0-1048-azureUpgrade linux-image-5.8.0-55-generic-64kUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gke-5.4Upgrade linux-image-5.8.0-1031-oracleUpgrade linux-image-5.4.0-1016-gkeopUpgrade linux-image-5.8.0-1032-gcpUpgrade linux-image-4.4.0-222-genericUpgrade linux-image-lowlatencyUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.8.0-55-lowlatencyUpgrade linux-image-5.10.0-1026-oemUpgrade linux-image-gkeop-5.4Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.15.0-1102-awsUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.15.0-1114-azureUpgrade linux-image-4.15.0-143-generic-lpaeUpgrade linux-image-4.15.0-1091-kvmUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oem-osp1Upgrade linux-image-4.4.0-1103-kvmUpgrade linux-image-5.4.0-1046-oracleUpgrade linux-image-gcpUpgrade linux-image-5.4.0-1040-kvmUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-raspi2Upgrade linux-image-genericUpgrade linux-image-5.4.0-74-lowlatencyUpgrade linux-image-5.4.0-74-genericUpgrade linux-image-generic-64kUpgrade linux-image-raspiUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-kvmUpgrade linux-image-azure-lts-18.04Upgrade linux-image-5.4.0-1036-raspiUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-gkeUpgrade linux-image-5.8.0-1028-kvmUpgrade linux-image-5.8.0-55-genericUpgrade linux-image-4.4.0-222-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-oem-20.04bUpgrade linux-image-5.8.0-55-generic-lpaeUpgrade linux-image-4.15.0-143-lowlatencyUpgrade linux-image-azureUpgrade linux-image-gkeopUpgrade linux-image-5.8.0-1033-azureUpgrade linux-image-4.15.0-1102-snapdragonUpgrade linux-image-dell300xUpgrade linux-image-5.4.0-1049-aws | May 12, 2021 | Apr 6, 2021 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Apr 6, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub