Linux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Linux Block and Network PV device frontends don't zero memory regions before sharing them with the backend (CVE-2022-26365, CVE-2022-33740). Additionally the granularity of the grant table doesn't allow sharing less than a 4K page, leading to unrelated data residing in the same 4K page as data shared with a backend being accessible by such backend (CVE-2022-33741, CVE-2022-33742).
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade xen | Aug 22, 2024 | Jul 5, 2022 |
| Amazon Linux Ami 2 | — | Upgrade bpftool-debuginfoUpgrade kernel-livepatch-4.14.287-215.504Upgrade kernelUpgrade kernel-headersUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade bpftoolUpgrade kernel-livepatch-5.10.130-118.517Upgrade kernel-livepatch-5.15.54-25.126Upgrade perfUpgrade kernel-tools-devel | Sep 30, 2022 | Jul 5, 2022 |
| Amazon_linux | — | Upgrade kernel | Aug 5, 2022 | Jul 5, 2022 |
| Debian | — | Upgrade linuxUpgrade xen | Oct 3, 2022 | Jul 5, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-tools-libsUpgrade kernelUpgrade bpftoolUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel-abi-stablelists | Oct 11, 2022 | Jul 5, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade python3-perfUpgrade kernel | Sep 14, 2022 | Jul 5, 2022 |
| Suse | — | Upgrade kernel-vanillaUpgrade ocfs2-kmp-azureUpgrade dtb-appleUpgrade dtb-amazonUpgrade kernel-default-optionalUpgrade kernel-debugUpgrade kernel-64kb-develUpgrade kernel-default-livepatch-develUpgrade kselftests-kmp-64kbUpgrade kernel-macrosUpgrade kernel-64kbUpgrade dtb-alteraUpgrade kernel-preempt-livepatch-develUpgrade kernel-preempt-optionalUpgrade dtb-marvellUpgrade dtb-exynosUpgrade kernel-docs-htmlUpgrade xenUpgrade dtb-amdUpgrade kernel-obs-qaUpgrade kernel-vanilla-develUpgrade xen-doc-htmlUpgrade dtb-lgUpgrade kernel-zfcpdumpUpgrade cluster-md-kmp-defaultUpgrade dtb-hisiliconUpgrade dtb-socionextUpgrade reiserfs-kmp-defaultUpgrade kernel-kvmsmallUpgrade dtb-broadcomUpgrade dtb-xilinxUpgrade kernel-debug-develUpgrade kernel-kvmsmall-develUpgrade kernel-azure-extraUpgrade ocfs2-kmp-preemptUpgrade reiserfs-kmp-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade xen-libs-32bitUpgrade kernel-64kb-livepatch-develUpgrade kernel-azure-baseUpgrade kernel-default-develUpgrade kernel-64kb-optionalUpgrade dlm-kmp-64kbUpgrade dtb-allwinnerUpgrade dtb-freescaleUpgrade kernel-default-livepatchUpgrade kernel-sourceUpgrade gfs2-kmp-64kbUpgrade kernel-devel-azureUpgrade dtb-renesasUpgrade dtb-amlogicUpgrade cluster-md-kmp-preemptUpgrade ocfs2-kmp-defaultUpgrade kernel-symsUpgrade kernel-source-azureUpgrade cluster-md-kmp-azureUpgrade kernel-zfcpdump-manUpgrade kernel-azure-optionalUpgrade kernel-default-extraUpgrade dtb-apmUpgrade kernel-default-baseUpgrade kernel-develUpgrade ocfs2-kmp-64kbUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-preemptUpgrade dlm-kmp-azureUpgrade kernel-preempt-extraUpgrade kernel-rtUpgrade dtb-qcomUpgrade dtb-nvidiaUpgrade kernel-source-vanillaUpgrade cluster-md-kmp-64kbUpgrade kernel-obs-buildUpgrade gfs2-kmp-defaultUpgrade kernel-64kb-extraUpgrade kselftests-kmp-preemptUpgrade kernel-azureUpgrade dtb-armUpgrade xen-develUpgrade dtb-zteUpgrade kselftests-kmp-azureUpgrade dtb-mediatekUpgrade xen-toolsUpgrade kernel-debug-livepatch-develUpgrade kernel-default-manUpgrade dtb-sprdUpgrade kernel-docsUpgrade kernel-syms-azureUpgrade kernel-preemptUpgrade kernel-vanilla-livepatch-develUpgrade kernel-kvmsmall-baseUpgrade kernel-debug-baseUpgrade kernel-azure-livepatch-develUpgrade gfs2-kmp-preemptUpgrade kernel-defaultUpgrade kernel-azure-develUpgrade kernel-vanilla-baseUpgrade dtb-caviumUpgrade dtb-alUpgrade xen-tools-xendomains-wait-diskUpgrade xen-tools-domuUpgrade kernel-default-base-rebuildUpgrade dlm-kmp-preemptUpgrade gfs2-kmp-azureUpgrade kselftests-kmp-defaultUpgrade dtb-rockchipUpgrade xen-libsUpgrade reiserfs-kmp-azureUpgrade kernel-preempt-devel | Oct 26, 2022 | Jul 5, 2022 |
| Ubuntu | — | Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-4.15.0-1138-snapdragonUpgrade linux-image-kvmUpgrade linux-image-5.15.0-1020-awsUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-oemUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-aws-hweUpgrade linux-image-4.15.0-1153-azureUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.15.0-1015-ibmUpgrade linux-image-5.15.0-48-lowlatency-64kUpgrade linux-image-4.15.0-1054-dell300xUpgrade linux-image-oem-20.04bUpgrade linux-image-5.4.0-1076-kvmUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1020-azureUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-snapdragonUpgrade linux-image-5.15.0-1018-oracleUpgrade linux-image-5.4.0-1090-gcpUpgrade linux-image-4.4.0-1148-awsUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-oem-20.04cUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-genericUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.4.0-233-genericUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gkeopUpgrade linux-image-5.15.0-48-generic-64kUpgrade linux-image-gkeop-5.15Upgrade linux-image-generic-64kUpgrade linux-image-4.15.0-194-lowlatencyUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.15.0-1018-kvmUpgrade linux-image-5.4.0-1054-gkeopUpgrade linux-image-4.15.0-1142-aws-hweUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1016-intel-iotgUpgrade linux-image-5.4.0-128-generic-lpaeUpgrade linux-image-azureUpgrade linux-image-4.15.0-194-genericUpgrade linux-image-5.4.0-1092-azure-fdeUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.15.0-1015-raspi-nolpaeUpgrade linux-image-dell300xUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.4.0-128-lowlatencyUpgrade linux-image-4.4.0-233-lowlatencyUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.15.0-1015-raspiUpgrade linux-image-5.15.0-48-lowlatencyUpgrade linux-image-4.15.0-194-generic-lpaeUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.4.0-1071-raspiUpgrade linux-image-5.4.0-1034-ibmUpgrade linux-image-gke-5.4Upgrade linux-image-raspi2Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.14.0-1055-oemUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-1086-awsUpgrade linux-image-5.15.0-48-generic-lpaeUpgrade linux-image-4.4.0-1113-kvmUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-intel-iotgUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-bluefieldUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-48-genericUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1018-gcpUpgrade linux-image-azure-lts-18.04Upgrade linux-image-5.15.0-1003-gkeopUpgrade linux-image-oem-20.04Upgrade linux-image-5.15.0-1016-gkeUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.15.0-1120-raspi2Upgrade linux-image-5.4.0-128-genericUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-4.15.0-1137-gcpUpgrade linux-image-4.15.0-1142-awsUpgrade linux-image-virtualUpgrade linux-image-lowlatency-64kUpgrade linux-image-gke-5.15Upgrade linux-image-oem-22.04aUpgrade linux-image-raspi-nolpaeUpgrade linux-image-awsUpgrade linux-image-gcpUpgrade linux-image-4.15.0-1107-oracleUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-oem-22.04Upgrade linux-image-oem-20.04dUpgrade linux-image-oracleUpgrade linux-image-gkeUpgrade linux-image-5.4.0-1047-bluefieldUpgrade linux-image-generic-lts-xenialUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-oem-osp1Upgrade linux-image-5.4.0-1084-gkeUpgrade linux-image-5.4.0-1084-oracleUpgrade linux-image-4.4.0-1112-awsUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-ibmUpgrade linux-image-lowlatencyUpgrade linux-image-5.17.0-1024-oemUpgrade linux-image-4.15.0-1128-kvm | Aug 19, 2022 | Jul 5, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 5, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub