Linux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Linux Block and Network PV device frontends don't zero memory regions before sharing them with the backend (CVE-2022-26365, CVE-2022-33740). Additionally the granularity of the grant table doesn't allow sharing less than a 4K page, leading to unrelated data residing in the same 4K page as data shared with a backend being accessible by such backend (CVE-2022-33741, CVE-2022-33742).
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade xen | Aug 22, 2024 | Jul 5, 2022 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-headersUpgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade kernel-livepatch-5.15.54-25.126Upgrade kernel-develUpgrade kernel-livepatch-4.14.287-215.504Upgrade python-perfUpgrade perf-debuginfoUpgrade perfUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade kernelUpgrade kernel-livepatch-5.10.130-118.517Upgrade python-perf-debuginfo | Sep 30, 2022 | Jul 5, 2022 |
| Amazon_linux | — | Upgrade kernel | Aug 5, 2022 | Jul 5, 2022 |
| Debian | — | Upgrade linuxUpgrade xen | Oct 3, 2022 | Jul 5, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-tools | Oct 11, 2022 | Jul 5, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel | Sep 14, 2022 | Jul 5, 2022 |
| Suse | — | Upgrade dtb-zteUpgrade kernel-rtUpgrade kernel-develUpgrade kernel-vanilla-livepatch-develUpgrade kernel-kvmsmallUpgrade dtb-mediatekUpgrade kernel-source-azureUpgrade dtb-nvidiaUpgrade dtb-apmUpgrade dtb-exynosUpgrade dtb-caviumUpgrade kernel-default-extraUpgrade cluster-md-kmp-azureUpgrade kernel-kvmsmall-baseUpgrade kernel-vanilla-baseUpgrade dtb-alteraUpgrade xen-tools-xendomains-wait-diskUpgrade dtb-qcomUpgrade kernel-azure-livepatch-develUpgrade dlm-kmp-preemptUpgrade dtb-amlogicUpgrade dtb-rockchipUpgrade kernel-sourceUpgrade kernel-obs-qaUpgrade kernel-azureUpgrade dtb-lgUpgrade kernel-source-vanillaUpgrade ocfs2-kmp-preemptUpgrade xen-doc-htmlUpgrade kernel-azure-optionalUpgrade dtb-armUpgrade dlm-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade kernel-obs-buildUpgrade dtb-xilinxUpgrade kernel-devel-azureUpgrade kernel-macrosUpgrade kselftests-kmp-64kbUpgrade xen-toolsUpgrade ocfs2-kmp-defaultUpgrade dtb-alUpgrade kselftests-kmp-preemptUpgrade kernel-preemptUpgrade kernel-debug-baseUpgrade xen-libs-32bitUpgrade gfs2-kmp-azureUpgrade kernel-kvmsmall-develUpgrade kernel-default-optionalUpgrade xen-libsUpgrade kernel-syms-azureUpgrade kernel-default-base-rebuildUpgrade xen-develUpgrade kernel-azure-develUpgrade kernel-azure-baseUpgrade dtb-allwinnerUpgrade kernel-default-livepatchUpgrade kernel-default-develUpgrade cluster-md-kmp-defaultUpgrade dtb-broadcomUpgrade kernel-64kb-develUpgrade kernel-docs-htmlUpgrade kernel-64kb-livepatch-develUpgrade dtb-hisiliconUpgrade kernel-64kb-extraUpgrade kernel-azure-extraUpgrade kernel-preempt-optionalUpgrade kernel-default-livepatch-develUpgrade dtb-renesasUpgrade dtb-amdUpgrade kernel-zfcpdump-manUpgrade dlm-kmp-defaultUpgrade kernel-default-manUpgrade kernel-debug-develUpgrade cluster-md-kmp-64kbUpgrade kernel-preempt-develUpgrade gfs2-kmp-defaultUpgrade xen-tools-domUUpgrade kernel-vanillaUpgrade kselftests-kmp-defaultUpgrade kernel-docsUpgrade gfs2-kmp-preemptUpgrade reiserfs-kmp-defaultUpgrade kernel-kvmsmall-livepatch-develUpgrade gfs2-kmp-64kbUpgrade reiserfs-kmp-preemptUpgrade dtb-socionextUpgrade kernel-zfcpdumpUpgrade kernel-vanilla-develUpgrade kernel-defaultUpgrade kernel-preempt-extraUpgrade kernel-64kbUpgrade kernel-default-baseUpgrade kernel-preempt-livepatch-develUpgrade xenUpgrade kernel-64kb-optionalUpgrade dtb-marvellUpgrade dtb-appleUpgrade dlm-kmp-azureUpgrade ocfs2-kmp-64kbUpgrade cluster-md-kmp-preemptUpgrade kselftests-kmp-azureUpgrade dtb-freescaleUpgrade kernel-debug-livepatch-develUpgrade dtb-sprdUpgrade reiserfs-kmp-64kbUpgrade dtb-amazonUpgrade ocfs2-kmp-azureUpgrade kernel-symsUpgrade kernel-debug | Oct 26, 2022 | Jul 5, 2022 |
| Ubuntu | — | Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-azureUpgrade linux-image-raspiUpgrade linux-image-gkeop-5.15Upgrade linux-image-oem-osp1Upgrade linux-image-azure-lts-18.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.4.0-128-generic-lpaeUpgrade linux-image-gke-5.4Upgrade linux-image-4.15.0-1153-azureUpgrade linux-image-5.15.0-1020-azureUpgrade linux-image-5.15.0-1016-gkeUpgrade linux-image-5.15.0-1016-intel-iotgUpgrade linux-image-dell300xUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-5.4.0-1090-gcpUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-4.15.0-194-lowlatencyUpgrade linux-image-5.15.0-48-lowlatencyUpgrade linux-image-aws-lts-18.04Upgrade linux-image-4.15.0-194-genericUpgrade linux-image-4.15.0-1138-snapdragonUpgrade linux-image-5.15.0-1015-ibmUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1015-raspi-nolpaeUpgrade linux-image-5.15.0-48-generic-lpaeUpgrade linux-image-gcpUpgrade linux-image-4.15.0-194-generic-lpaeUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-1018-gcpUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-4.15.0-1142-aws-hweUpgrade linux-image-5.15.0-1020-awsUpgrade linux-image-kvmUpgrade linux-image-5.15.0-48-genericUpgrade linux-image-intel-iotgUpgrade linux-image-snapdragonUpgrade linux-image-oem-20.04Upgrade linux-image-4.15.0-1120-raspi2Upgrade linux-image-awsUpgrade linux-image-5.15.0-48-lowlatency-64kUpgrade linux-image-4.15.0-1054-dell300xUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-gkeUpgrade linux-image-5.4.0-128-genericUpgrade linux-image-lowlatency-64kUpgrade linux-image-4.15.0-1107-oracleUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.4.0-1084-oracleUpgrade linux-image-5.15.0-1015-raspiUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-bluefieldUpgrade linux-image-5.4.0-1076-kvmUpgrade linux-image-5.15.0-1018-oracleUpgrade linux-image-4.15.0-1142-awsUpgrade linux-image-5.4.0-1034-ibmUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-1054-gkeopUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.4.0-1047-bluefieldUpgrade linux-image-oemUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-aws-hweUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-azure-fdeUpgrade linux-image-genericUpgrade linux-image-lowlatencyUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1003-gkeopUpgrade linux-image-oracleUpgrade linux-image-5.4.0-1071-raspiUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-4.15.0-1137-gcpUpgrade linux-image-virtualUpgrade linux-image-gkeop-5.4Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.4.0-1092-azure-fdeUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.15.0-1018-kvmUpgrade linux-image-ibmUpgrade linux-image-5.4.0-1084-gkeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-gkeopUpgrade linux-image-generic-64kUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-48-generic-64kUpgrade linux-image-4.15.0-1128-kvmUpgrade linux-image-aws-lts-20.04Upgrade linux-image-raspi2Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.4.0-1086-awsUpgrade linux-image-5.4.0-128-lowlatency | Sep 21, 2022 | Jul 5, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 5, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub