Linux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Linux Block and Network PV device frontends don't zero memory regions before sharing them with the backend (CVE-2022-26365, CVE-2022-33740). Additionally the granularity of the grant table doesn't allow sharing less than a 4K page, leading to unrelated data residing in the same 4K page as data shared with a backend being accessible by such backend (CVE-2022-33741, CVE-2022-33742).
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade xen | Aug 22, 2024 | Jul 5, 2022 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-4.14.287-215.504Upgrade python-perfUpgrade python-perf-debuginfoUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.15.54-25.126Upgrade kernel-livepatch-5.10.130-118.517Upgrade bpftoolUpgrade perfUpgrade kernel-tools-develUpgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfo | Sep 30, 2022 | Jul 5, 2022 |
| Amazon_linux | — | Upgrade kernel | Aug 5, 2022 | Jul 5, 2022 |
| Debian | — | Upgrade linuxUpgrade xen | Oct 3, 2022 | Jul 5, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade bpftool | Oct 11, 2022 | Jul 5, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel | Sep 14, 2022 | Jul 5, 2022 |
| Suse | — | Upgrade kernel-default-extraUpgrade dtb-apmUpgrade kernel-default-baseUpgrade kernel-develUpgrade ocfs2-kmp-64kbUpgrade kernel-vanilla-develUpgrade dtb-lgUpgrade kernel-zfcpdumpUpgrade ocfs2-kmp-defaultUpgrade ocfs2-kmp-azureUpgrade dtb-appleUpgrade dtb-renesasUpgrade dlm-kmp-defaultUpgrade kernel-sourceUpgrade kernel-64kb-optionalUpgrade kernel-devel-azureUpgrade ocfs2-kmp-preemptUpgrade dtb-alteraUpgrade gfs2-kmp-64kbUpgrade dtb-amdUpgrade cluster-md-kmp-azureUpgrade xen-doc-htmlUpgrade cluster-md-kmp-preemptUpgrade kernel-debugUpgrade dtb-hisiliconUpgrade kernel-obs-qaUpgrade kernel-default-optionalUpgrade dtb-amlogicUpgrade dtb-exynosUpgrade dtb-marvellUpgrade kernel-source-azureUpgrade kernel-zfcpdump-manUpgrade kernel-64kb-develUpgrade kernel-default-livepatch-develUpgrade dtb-xilinxUpgrade kernel-kvmsmallUpgrade dtb-socionextUpgrade kernel-debug-develUpgrade kernel-azure-optionalUpgrade xenUpgrade dtb-broadcomUpgrade kernel-azure-extraUpgrade kernel-default-develUpgrade reiserfs-kmp-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-symsUpgrade xen-libs-32bitUpgrade dtb-allwinnerUpgrade kernel-kvmsmall-develUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-64kb-livepatch-develUpgrade kernel-vanillaUpgrade dtb-freescaleUpgrade reiserfs-kmp-preemptUpgrade dtb-amazonUpgrade dlm-kmp-64kbUpgrade kernel-default-livepatchUpgrade kernel-azure-baseUpgrade kernel-docs-htmlUpgrade kernel-macrosUpgrade kernel-preempt-livepatch-develUpgrade kernel-preempt-optionalUpgrade kselftests-kmp-64kbUpgrade kernel-64kbUpgrade kernel-azureUpgrade xen-develUpgrade kselftests-kmp-preemptUpgrade dlm-kmp-preemptUpgrade xen-tools-domuUpgrade kernel-preempt-extraUpgrade kernel-default-base-rebuildUpgrade dtb-caviumUpgrade cluster-md-kmp-64kbUpgrade dtb-zteUpgrade dlm-kmp-azureUpgrade dtb-alUpgrade xen-tools-xendomains-wait-diskUpgrade dtb-rockchipUpgrade kernel-default-manUpgrade gfs2-kmp-preemptUpgrade kernel-debug-livepatch-develUpgrade dtb-sprdUpgrade kernel-azure-livepatch-develUpgrade kernel-syms-azureUpgrade kernel-64kb-extraUpgrade gfs2-kmp-azureUpgrade kernel-rtUpgrade kernel-preempt-develUpgrade kernel-azure-develUpgrade dtb-nvidiaUpgrade dtb-armUpgrade xen-toolsUpgrade kselftests-kmp-azureUpgrade dtb-mediatekUpgrade xen-libsUpgrade kernel-kvmsmall-baseUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-debug-baseUpgrade kernel-vanilla-livepatch-develUpgrade kernel-preemptUpgrade kselftests-kmp-defaultUpgrade kernel-source-vanillaUpgrade kernel-obs-buildUpgrade kernel-vanilla-baseUpgrade dtb-qcomUpgrade reiserfs-kmp-azureUpgrade gfs2-kmp-default | Oct 26, 2022 | Jul 5, 2022 |
| Ubuntu | — | Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.15.0-48-lowlatencyUpgrade linux-image-intel-iotgUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-generic-lpaeUpgrade linux-image-generic-lts-xenialUpgrade linux-image-oem-22.04Upgrade linux-image-5.15.0-1018-gcpUpgrade linux-image-lowlatency-64kUpgrade linux-image-oem-22.04aUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.17.0-1024-oemUpgrade linux-image-5.15.0-1016-gkeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.15.0-1003-gkeopUpgrade linux-image-5.4.0-1084-gkeUpgrade linux-image-4.15.0-1120-raspi2Upgrade linux-image-5.4.0-128-genericUpgrade linux-image-virtualUpgrade linux-image-4.15.0-194-generic-lpaeUpgrade linux-image-5.4.0-128-lowlatencyUpgrade linux-image-4.15.0-1137-gcpUpgrade linux-image-5.4.0-1034-ibmUpgrade linux-image-gke-5.15Upgrade linux-image-oem-osp1Upgrade linux-image-4.4.0-233-lowlatencyUpgrade linux-image-5.14.0-1055-oemUpgrade linux-image-gcpUpgrade linux-image-bluefieldUpgrade linux-image-5.4.0-1084-oracleUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-4.15.0-1107-oracleUpgrade linux-image-5.4.0-1047-bluefieldUpgrade linux-image-azure-lts-18.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-4.4.0-1113-kvmUpgrade linux-image-oracleUpgrade linux-image-5.4.0-1071-raspiUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-48-genericUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-4.4.0-1112-awsUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gke-5.4Upgrade linux-image-ibmUpgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-1086-awsUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-raspi2Upgrade linux-image-4.15.0-1128-kvmUpgrade linux-image-gkeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oem-20.04Upgrade linux-image-4.15.0-1142-awsUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-awsUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-48-generic-lpaeUpgrade linux-image-oem-20.04dUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-1015-raspiUpgrade linux-image-5.15.0-1016-intel-iotgUpgrade linux-image-oem-20.04cUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-oem-20.04bUpgrade linux-image-aws-hweUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.4.0-1076-kvmUpgrade linux-image-5.15.0-1015-ibmUpgrade linux-image-4.15.0-1138-snapdragonUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oemUpgrade linux-image-4.15.0-1142-aws-hweUpgrade linux-image-5.4.0-1054-gkeopUpgrade linux-image-5.4.0-128-generic-lpaeUpgrade linux-image-raspiUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-1020-azureUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.15.0-48-lowlatency-64kUpgrade linux-image-snapdragonUpgrade linux-image-4.4.0-233-genericUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.15.0-48-generic-64kUpgrade linux-image-5.15.0-1018-kvmUpgrade linux-image-4.15.0-1153-azureUpgrade linux-image-dell300xUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-4.15.0-1054-dell300xUpgrade linux-image-5.15.0-1018-oracleUpgrade linux-image-generic-64kUpgrade linux-image-gkeopUpgrade linux-image-4.4.0-1148-awsUpgrade linux-image-5.4.0-1090-gcpUpgrade linux-image-4.15.0-194-lowlatencyUpgrade linux-image-4.15.0-194-genericUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-5.15.0-1015-raspi-nolpaeUpgrade linux-image-5.4.0-1092-azure-fdeUpgrade linux-image-aws-lts-20.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-azureUpgrade linux-image-genericUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1020-aws | Aug 19, 2022 | Jul 5, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 5, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub