Linux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Linux Block and Network PV device frontends don't zero memory regions before sharing them with the backend (CVE-2022-26365, CVE-2022-33740). Additionally the granularity of the grant table doesn't allow sharing less than a 4K page, leading to unrelated data residing in the same 4K page as data shared with a backend being accessible by such backend (CVE-2022-33741, CVE-2022-33742).
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade xen | Aug 22, 2024 | Jul 5, 2022 |
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade kernel-livepatch-5.10.130-118.517Upgrade kernel-tools-develUpgrade bpftoolUpgrade kernel-develUpgrade kernel-livepatch-5.15.54-25.126Upgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade python-perf-debuginfoUpgrade kernel-livepatch-4.14.287-215.504Upgrade python-perfUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernelUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64 | Sep 30, 2022 | Jul 5, 2022 |
| Amazon_linux | — | Upgrade kernel | Aug 5, 2022 | Jul 5, 2022 |
| Debian | — | Upgrade xenUpgrade linux | Oct 3, 2022 | Jul 5, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-abi-stablelists | Oct 11, 2022 | Jul 5, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libs | Sep 14, 2022 | Jul 5, 2022 |
| Suse | — | Upgrade kernel-zfcpdump-manUpgrade cluster-md-kmp-azureUpgrade kernel-64kb-develUpgrade gfs2-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kernel-default-optionalUpgrade cluster-md-kmp-preemptUpgrade dtb-amdUpgrade kernel-obs-qaUpgrade xen-doc-htmlUpgrade dtb-hisiliconUpgrade kernel-kvmsmall-develUpgrade reiserfs-kmp-defaultUpgrade kernel-kvmsmallUpgrade dtb-broadcomUpgrade dtb-socionextUpgrade kernel-azure-extraUpgrade kernel-debug-develUpgrade kernel-source-azureUpgrade xenUpgrade kernel-azure-optionalUpgrade kernel-docs-htmlUpgrade dtb-amlogicUpgrade dtb-xilinxUpgrade dtb-exynosUpgrade ocfs2-kmp-preemptUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-apmUpgrade dtb-freescaleUpgrade kernel-64kb-livepatch-develUpgrade kernel-develUpgrade dtb-appleUpgrade reiserfs-kmp-preemptUpgrade ocfs2-kmp-64kbUpgrade kernel-default-develUpgrade kernel-64kb-optionalUpgrade kernel-64kbUpgrade kernel-default-livepatch-develUpgrade kernel-preempt-livepatch-develUpgrade kernel-sourceUpgrade kselftests-kmp-64kbUpgrade dtb-alteraUpgrade kernel-default-baseUpgrade kernel-macrosUpgrade dtb-renesasUpgrade kernel-preempt-optionalUpgrade kernel-devel-azureUpgrade kernel-default-extraUpgrade dlm-kmp-defaultUpgrade reiserfs-kmp-64kbUpgrade dlm-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-azure-baseUpgrade ocfs2-kmp-azureUpgrade kernel-vanillaUpgrade dtb-lgUpgrade cluster-md-kmp-defaultUpgrade dtb-amazonUpgrade kernel-vanilla-develUpgrade dtb-mediatekUpgrade dtb-nvidiaUpgrade xen-develUpgrade kernel-azureUpgrade gfs2-kmp-preemptUpgrade kselftests-kmp-azureUpgrade dtb-qcomUpgrade xen-toolsUpgrade kernel-vanilla-baseUpgrade gfs2-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade dtb-rockchipUpgrade reiserfs-kmp-azureUpgrade kernel-azure-develUpgrade kernel-defaultUpgrade xen-libsUpgrade kernel-preemptUpgrade kernel-vanilla-livepatch-develUpgrade kernel-rtUpgrade kselftests-kmp-preemptUpgrade dtb-alUpgrade gfs2-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-azureUpgrade dtb-armUpgrade kernel-64kb-extraUpgrade dtb-caviumUpgrade kernel-preempt-extraUpgrade xen-tools-xendomains-wait-diskUpgrade kernel-debug-baseUpgrade kernel-default-base-rebuildUpgrade kernel-kvmsmall-baseUpgrade kernel-preempt-develUpgrade kernel-obs-buildUpgrade dtb-zteUpgrade kernel-source-vanillaUpgrade dlm-kmp-preemptUpgrade kernel-docsUpgrade dtb-sprdUpgrade kernel-syms-azureUpgrade kernel-default-manUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-livepatch-devel | Oct 26, 2022 | Jul 5, 2022 |
| Ubuntu | — | Upgrade linux-image-dell300xUpgrade linux-image-5.15.0-1016-intel-iotgUpgrade linux-image-kvmUpgrade linux-image-oemUpgrade linux-image-snapdragonUpgrade linux-image-5.4.0-1092-azure-fdeUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-1054-dell300xUpgrade linux-image-raspiUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-5.15.0-1015-raspi-nolpaeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.4.0-1054-gkeopUpgrade linux-image-4.15.0-1138-snapdragonUpgrade linux-image-5.15.0-48-generic-64kUpgrade linux-image-5.15.0-48-lowlatency-64kUpgrade linux-image-5.4.0-128-generic-lpaeUpgrade linux-image-5.15.0-1018-kvmUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-1076-kvmUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-aws-hweUpgrade linux-image-5.15.0-1020-azureUpgrade linux-image-5.4.0-1090-gcpUpgrade linux-image-4.4.0-233-genericUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-oem-20.04cUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-oem-20.04bUpgrade linux-image-4.15.0-1142-aws-hweUpgrade linux-image-gkeop-5.15Upgrade linux-image-4.15.0-194-genericUpgrade linux-image-azure-fdeUpgrade linux-image-4.15.0-194-lowlatencyUpgrade linux-image-5.15.0-1015-ibmUpgrade linux-image-5.15.0-1020-awsUpgrade linux-image-azureUpgrade linux-image-aws-lts-20.04Upgrade linux-image-genericUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gkeopUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1018-oracleUpgrade linux-image-4.15.0-1153-azureUpgrade linux-image-4.4.0-1148-awsUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-intel-iotgUpgrade linux-image-gcpUpgrade linux-image-raspi-nolpaeUpgrade linux-image-4.15.0-1142-awsUpgrade linux-image-oem-22.04aUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-1107-oracleUpgrade linux-image-gke-5.15Upgrade linux-image-awsUpgrade linux-image-oem-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-4.15.0-194-generic-lpaeUpgrade linux-image-oracleUpgrade linux-image-5.14.0-1055-oemUpgrade linux-image-raspi2Upgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.17.0-1024-oemUpgrade linux-image-oem-20.04dUpgrade linux-image-oem-20.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-5.15.0-1016-gkeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-4.15.0-1120-raspi2Upgrade linux-image-oem-osp1Upgrade linux-image-virtual-lts-xenialUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-5.4.0-1086-awsUpgrade linux-image-bluefieldUpgrade linux-image-virtualUpgrade linux-image-ibmUpgrade linux-image-5.4.0-1084-oracleUpgrade linux-image-5.4.0-1071-raspiUpgrade linux-image-5.4.0-128-lowlatencyUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-1003-gkeopUpgrade linux-image-5.4.0-1034-ibmUpgrade linux-image-5.4.0-1084-gkeUpgrade linux-image-gke-5.4Upgrade linux-image-4.15.0-1128-kvmUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-128-genericUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-4.15.0-1137-gcpUpgrade linux-image-5.15.0-48-genericUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.15.0-48-generic-lpaeUpgrade linux-image-4.4.0-1112-awsUpgrade linux-image-5.4.0-1047-bluefieldUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-gkeUpgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1018-gcpUpgrade linux-image-5.15.0-48-lowlatencyUpgrade linux-image-5.15.0-1015-raspiUpgrade linux-image-4.4.0-1113-kvmUpgrade linux-image-generic-lts-xenialUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-4.4.0-233-lowlatencyUpgrade linux-image-generic-64k-hwe-20.04 | Aug 19, 2022 | Jul 5, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 5, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub