Linux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Linux Block and Network PV device frontends don't zero memory regions before sharing them with the backend (CVE-2022-26365, CVE-2022-33740). Additionally the granularity of the grant table doesn't allow sharing less than a 4K page, leading to unrelated data residing in the same 4K page as data shared with a backend being accessible by such backend (CVE-2022-33741, CVE-2022-33742).
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade xen | Aug 22, 2024 | Jul 5, 2022 |
| Amazon Linux Ami 2 | — | Upgrade bpftool-debuginfoUpgrade python-perfUpgrade perf-debuginfoUpgrade bpftoolUpgrade perfUpgrade kernel-toolsUpgrade kernel-livepatch-4.14.287-215.504Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.10.130-118.517Upgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.15.54-25.126Upgrade kernelUpgrade kernel-develUpgrade python-perf-debuginfo | Sep 30, 2022 | Jul 5, 2022 |
| Amazon_linux | — | Upgrade kernel | Aug 5, 2022 | Jul 5, 2022 |
| Debian | — | Upgrade linuxUpgrade xen | Oct 3, 2022 | Jul 5, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Oct 11, 2022 | Jul 5, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-toolsUpgrade kernel-tools-libs | Sep 14, 2022 | Jul 5, 2022 |
| Suse | — | Upgrade dlm-kmp-azureUpgrade dtb-amlogicUpgrade kernel-default-develUpgrade cluster-md-kmp-defaultUpgrade kernel-debug-livepatch-develUpgrade kernel-zfcpdumpUpgrade kernel-azure-develUpgrade dtb-zteUpgrade dtb-hisiliconUpgrade dtb-appleUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-freescaleUpgrade kernel-64kbUpgrade dtb-apmUpgrade kernel-64kb-livepatch-develUpgrade kernel-azure-extraUpgrade xen-tools-domUUpgrade kernel-default-manUpgrade kernel-vanillaUpgrade kernel-symsUpgrade xenUpgrade kernel-default-extraUpgrade gfs2-kmp-64kbUpgrade kernel-sourceUpgrade kernel-devel-azureUpgrade kernel-64kb-develUpgrade kernel-debug-baseUpgrade dtb-exynosUpgrade kernel-azure-livepatch-develUpgrade dtb-armUpgrade kernel-macrosUpgrade xen-tools-xendomains-wait-diskUpgrade kernel-64kb-optionalUpgrade dlm-kmp-64kbUpgrade kselftests-kmp-64kbUpgrade xen-libsUpgrade dtb-alUpgrade kernel-kvmsmallUpgrade kernel-rtUpgrade xen-develUpgrade kernel-kvmsmall-develUpgrade kernel-preemptUpgrade kernel-syms-azureUpgrade dtb-mediatekUpgrade kernel-obs-qaUpgrade dtb-qcomUpgrade kernel-source-azureUpgrade dtb-amazonUpgrade xen-toolsUpgrade dtb-lgUpgrade cluster-md-kmp-azureUpgrade kselftests-kmp-defaultUpgrade ocfs2-kmp-preemptUpgrade kernel-debugUpgrade reiserfs-kmp-preemptUpgrade kernel-source-vanillaUpgrade kernel-64kb-extraUpgrade dtb-marvellUpgrade kernel-vanilla-develUpgrade ocfs2-kmp-azureUpgrade kernel-defaultUpgrade dtb-renesasUpgrade ocfs2-kmp-64kbUpgrade kernel-preempt-optionalUpgrade dtb-socionextUpgrade kernel-azure-optionalUpgrade kernel-debug-develUpgrade kernel-default-optionalUpgrade kselftests-kmp-azureUpgrade kernel-preempt-develUpgrade reiserfs-kmp-azureUpgrade kernel-preempt-extraUpgrade kernel-azure-baseUpgrade dtb-nvidiaUpgrade dtb-alteraUpgrade kernel-default-baseUpgrade kernel-default-livepatchUpgrade cluster-md-kmp-64kbUpgrade kernel-kvmsmall-baseUpgrade cluster-md-kmp-preemptUpgrade gfs2-kmp-preemptUpgrade ocfs2-kmp-defaultUpgrade kernel-zfcpdump-manUpgrade dlm-kmp-defaultUpgrade dtb-sprdUpgrade kselftests-kmp-preemptUpgrade kernel-vanilla-baseUpgrade kernel-docsUpgrade dtb-amdUpgrade dtb-caviumUpgrade gfs2-kmp-defaultUpgrade kernel-vanilla-livepatch-develUpgrade kernel-azureUpgrade dtb-broadcomUpgrade kernel-docs-htmlUpgrade reiserfs-kmp-64kbUpgrade reiserfs-kmp-defaultUpgrade dtb-allwinnerUpgrade kernel-develUpgrade kernel-default-base-rebuildUpgrade dlm-kmp-preemptUpgrade dtb-xilinxUpgrade dtb-rockchipUpgrade kernel-obs-buildUpgrade kernel-default-livepatch-develUpgrade gfs2-kmp-azureUpgrade xen-doc-htmlUpgrade xen-libs-32bitUpgrade kernel-preempt-livepatch-devel | Oct 26, 2022 | Jul 5, 2022 |
| Ubuntu | — | Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-4.15.0-1107-oracleUpgrade linux-image-aws-hweUpgrade linux-image-4.15.0-1153-azureUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-5.15.0-1015-raspi-nolpaeUpgrade linux-image-5.15.0-48-lowlatency-64kUpgrade linux-image-4.15.0-1138-snapdragonUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.4.0-233-lowlatencyUpgrade linux-image-4.15.0-1142-aws-hweUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-1016-gkeUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1016-intel-iotgUpgrade linux-image-awsUpgrade linux-image-5.4.0-1090-gcpUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-128-generic-lpaeUpgrade linux-image-5.15.0-48-generic-lpaeUpgrade linux-image-5.15.0-48-lowlatencyUpgrade linux-image-snapdragonUpgrade linux-image-4.15.0-194-genericUpgrade linux-image-gkeop-5.15Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-azureUpgrade linux-image-5.4.0-128-genericUpgrade linux-image-4.15.0-194-generic-lpaeUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-4.15.0-1120-raspi2Upgrade linux-image-oem-osp1Upgrade linux-image-4.15.0-194-lowlatencyUpgrade linux-image-5.15.0-1003-gkeopUpgrade linux-image-kvmUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-raspiUpgrade linux-image-5.15.0-1020-awsUpgrade linux-image-oem-20.04Upgrade linux-image-gkeUpgrade linux-image-virtual-lts-xenialUpgrade linux-image-5.15.0-1015-ibmUpgrade linux-image-gcpUpgrade linux-image-5.15.0-1018-gcpUpgrade linux-image-4.15.0-1054-dell300xUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-gke-5.4Upgrade linux-image-5.15.0-48-genericUpgrade linux-image-lowlatency-lts-xenialUpgrade linux-image-5.15.0-1020-azureUpgrade linux-image-aws-lts-18.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-dell300xUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.4.0-1047-bluefieldUpgrade linux-image-generic-64kUpgrade linux-image-5.4.0-1084-oracleUpgrade linux-image-bluefieldUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.4.0-1034-ibmUpgrade linux-image-4.4.0-233-genericUpgrade linux-image-5.4.0-128-lowlatencyUpgrade linux-image-raspi-nolpaeUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-raspi2Upgrade linux-image-genericUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.4.0-1071-raspiUpgrade linux-image-5.4.0-1076-kvmUpgrade linux-image-virtualUpgrade linux-image-5.4.0-1086-awsUpgrade linux-image-gke-5.15Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-4.4.0-1113-kvmUpgrade linux-image-oemUpgrade linux-image-5.4.0-1092-azure-fdeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-4.15.0-1128-kvmUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1015-raspiUpgrade linux-image-oracleUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-intel-iotgUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-4.15.0-1142-awsUpgrade linux-image-5.15.0-48-generic-64kUpgrade linux-image-4.15.0-1137-gcpUpgrade linux-image-5.4.0-1054-gkeopUpgrade linux-image-4.4.0-1148-awsUpgrade linux-image-4.4.0-1112-awsUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-ibmUpgrade linux-image-5.15.0-1018-kvmUpgrade linux-image-generic-lts-xenialUpgrade linux-image-gkeopUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-1084-gkeUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.15.0-1018-oracle | Aug 19, 2022 | Jul 5, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 5, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub