A memory leak flaw was found in the Linux kernel in acrn_dev_ioctl in the drivers/virt/acrn/hsm.c function in how the ACRN Device Model emulates virtual NICs in VM. This flaw allows a local privileged attacker to leak unauthorized kernel information, causing a denial of service.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 30, 2024 | Jul 26, 2022 |
| Suse | — | Upgrade dtb-appleUpgrade kernel-obs-qaUpgrade kernel-develUpgrade dtb-allwinnerUpgrade dtb-amdUpgrade dtb-lgUpgrade kernel-default-livepatchUpgrade kernel-debug-develUpgrade dlm-kmp-64kbUpgrade kernel-macrosUpgrade dtb-xilinxUpgrade kernel-devel-azureUpgrade kernel-64kb-optionalUpgrade dtb-freescaleUpgrade dtb-apmUpgrade kernel-64kb-develUpgrade dtb-hisiliconUpgrade dtb-amlogicUpgrade dtb-amazonUpgrade gfs2-kmp-64kbUpgrade kernel-default-extraUpgrade ocfs2-kmp-azureUpgrade dlm-kmp-azureUpgrade dtb-socionextUpgrade kernel-kvmsmall-develUpgrade dtb-mediatekUpgrade cluster-md-kmp-azureUpgrade kernel-symsUpgrade kernel-source-azureUpgrade kernel-zfcpdumpUpgrade dtb-renesasUpgrade kselftests-kmp-defaultUpgrade kernel-sourceUpgrade dtb-exynosUpgrade dtb-armUpgrade kernel-default-livepatch-develUpgrade kernel-default-optionalUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-defaultUpgrade kernel-64kb-livepatch-develUpgrade kernel-kvmsmallUpgrade kernel-kvmsmall-livepatch-develUpgrade cluster-md-kmp-defaultUpgrade kernel-azure-extraUpgrade kselftests-kmp-64kbUpgrade kernel-default-baseUpgrade kernel-64kbUpgrade kernel-default-develUpgrade reiserfs-kmp-defaultUpgrade kernel-debugUpgrade reiserfs-kmp-azureUpgrade dtb-marvellUpgrade dtb-sprdUpgrade kernel-obs-buildUpgrade kernel-syms-azureUpgrade kernel-azure-livepatch-develUpgrade kernel-azure-develUpgrade dtb-nvidiaUpgrade dtb-qcomUpgrade kernel-docs-htmlUpgrade kernel-debug-livepatch-develUpgrade gfs2-kmp-defaultUpgrade dtb-alteraUpgrade kernel-source-vanillaUpgrade ocfs2-kmp-64kbUpgrade kernel-64kb-extraUpgrade reiserfs-kmp-64kbUpgrade kselftests-kmp-azureUpgrade dtb-caviumUpgrade kernel-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-default-base-rebuildUpgrade dtb-rockchipUpgrade dtb-broadcomUpgrade kernel-azureUpgrade kernel-docsUpgrade kernel-azure-optionalUpgrade gfs2-kmp-azure | Oct 26, 2022 | Jul 26, 2022 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1011-raspi-nolpaeUpgrade linux-image-raspiUpgrade linux-image-kvmUpgrade linux-image-azureUpgrade linux-image-awsUpgrade linux-image-lowlatencyUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-37-genericUpgrade linux-image-generic-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.15.0-37-generic-64kUpgrade linux-image-5.15.0-37-lowlatencyUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1010-azureUpgrade linux-image-5.15.0-1011-raspiUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-37-lowlatency-64kUpgrade linux-image-5.15.0-1009-oracleUpgrade linux-image-5.15.0-1011-awsUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-gcpUpgrade linux-image-5.15.0-1010-kvmUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-37-generic-lpaeUpgrade linux-image-intel-iotgUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-oracleUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1008-gkeUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1007-ibmUpgrade linux-image-5.15.0-1008-gcpUpgrade linux-image-5.15.0-1008-intel-iotgUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-genericUpgrade linux-image-lowlatency-64kUpgrade linux-image-gke | Jun 9, 2022 | Jun 8, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub