Linux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Linux Block and Network PV device frontends don't zero memory regions before sharing them with the backend (CVE-2022-26365, CVE-2022-33740). Additionally the granularity of the grant table doesn't allow sharing less than a 4K page, leading to unrelated data residing in the same 4K page as data shared with a backend being accessible by such backend (CVE-2022-33741, CVE-2022-33742).
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade xen | Aug 22, 2024 | Jul 5, 2022 |
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-livepatch-5.15.54-25.126Upgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade perfUpgrade kernel-livepatch-4.14.287-215.504Upgrade kernel-toolsUpgrade python-perf-debuginfoUpgrade kernel-tools-develUpgrade python-perfUpgrade perf-debuginfoUpgrade kernel-livepatch-5.10.130-118.517Upgrade kernel | Sep 30, 2022 | Jul 5, 2022 |
| Amazon_linux | — | Upgrade kernel | Aug 5, 2022 | Jul 5, 2022 |
| Debian | — | Upgrade linuxUpgrade xen | Oct 3, 2022 | Jul 5, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade bpftool | Oct 11, 2022 | Jul 5, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-tools | Sep 14, 2022 | Jul 5, 2022 |
| Suse | — | Upgrade kernel-defaultUpgrade kernel-docs-htmlUpgrade gfs2-kmp-defaultUpgrade kernel-default-develUpgrade kernel-default-livepatchUpgrade kernel-zfcpdumpUpgrade gfs2-kmp-64kbUpgrade kernel-vanillaUpgrade kernel-docsUpgrade kernel-preempt-livepatch-develUpgrade dtb-appleUpgrade kernel-64kbUpgrade xenUpgrade kernel-default-manUpgrade cluster-md-kmp-defaultUpgrade kernel-64kb-optionalUpgrade cluster-md-kmp-64kbUpgrade kernel-preempt-extraUpgrade kernel-preempt-develUpgrade dtb-marvellUpgrade reiserfs-kmp-64kbUpgrade kernel-64kb-livepatch-develUpgrade kernel-zfcpdump-manUpgrade kernel-debug-develUpgrade dlm-kmp-defaultUpgrade dtb-amdUpgrade kernel-default-livepatch-develUpgrade reiserfs-kmp-preemptUpgrade kselftests-kmp-defaultUpgrade xen-tools-domUUpgrade gfs2-kmp-preemptUpgrade kernel-debugUpgrade kernel-kvmsmall-livepatch-develUpgrade ocfs2-kmp-azureUpgrade reiserfs-kmp-defaultUpgrade kernel-vanilla-develUpgrade kernel-debug-livepatch-develUpgrade dtb-sprdUpgrade dtb-freescaleUpgrade dtb-socionextUpgrade kernel-64kb-develUpgrade dtb-hisiliconUpgrade dtb-renesasUpgrade kselftests-kmp-azureUpgrade kernel-symsUpgrade dlm-kmp-azureUpgrade cluster-md-kmp-preemptUpgrade kernel-64kb-extraUpgrade ocfs2-kmp-64kbUpgrade kernel-preempt-optionalUpgrade dtb-broadcomUpgrade dtb-allwinnerUpgrade dtb-amazonUpgrade kernel-azure-baseUpgrade kernel-default-baseUpgrade kernel-azure-extraUpgrade kernel-preemptUpgrade dtb-xilinxUpgrade dtb-nvidiaUpgrade dtb-lgUpgrade xen-libs-32bitUpgrade kernel-kvmsmall-develUpgrade kernel-default-optionalUpgrade kernel-obs-buildUpgrade dtb-armUpgrade kernel-source-azureUpgrade kernel-debug-baseUpgrade dtb-alteraUpgrade ocfs2-kmp-defaultUpgrade dtb-qcomUpgrade xen-libsUpgrade dtb-alUpgrade kernel-vanilla-livepatch-develUpgrade kernel-default-extraUpgrade gfs2-kmp-azureUpgrade dlm-kmp-64kbUpgrade dlm-kmp-preemptUpgrade kernel-azure-develUpgrade kernel-azure-livepatch-develUpgrade dtb-rockchipUpgrade xen-develUpgrade kernel-azure-optionalUpgrade kernel-rtUpgrade dtb-apmUpgrade ocfs2-kmp-preemptUpgrade xen-tools-xendomains-wait-diskUpgrade xen-doc-htmlUpgrade dtb-amlogicUpgrade kernel-syms-azureUpgrade kernel-macrosUpgrade xen-toolsUpgrade dtb-mediatekUpgrade dtb-exynosUpgrade kernel-vanilla-baseUpgrade dtb-caviumUpgrade kernel-kvmsmall-baseUpgrade kernel-sourceUpgrade kernel-azureUpgrade kernel-develUpgrade kernel-obs-qaUpgrade kselftests-kmp-preemptUpgrade kernel-source-vanillaUpgrade kernel-kvmsmallUpgrade kernel-devel-azureUpgrade kernel-default-base-rebuildUpgrade kselftests-kmp-64kbUpgrade dtb-zteUpgrade cluster-md-kmp-azureUpgrade reiserfs-kmp-azure | Oct 26, 2022 | Jul 5, 2022 |
| Ubuntu | — | Upgrade linux-image-5.15.0-1016-gkeUpgrade linux-image-raspiUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-oem-osp1Upgrade linux-image-4.15.0-194-generic-lpaeUpgrade linux-image-kvmUpgrade linux-image-gcpUpgrade linux-image-azure-lts-18.04Upgrade linux-image-5.15.0-48-genericUpgrade linux-image-gkeop-5.15Upgrade linux-image-intel-iotgUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-snapdragonUpgrade linux-image-5.15.0-48-lowlatencyUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.15.0-48-generic-lpaeUpgrade linux-image-4.15.0-194-lowlatencyUpgrade linux-image-awsUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-4.15.0-1120-raspi2Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-4.15.0-1138-snapdragonUpgrade linux-image-oem-20.04Upgrade linux-image-4.15.0-1142-aws-hweUpgrade linux-image-5.15.0-1015-raspi-nolpaeUpgrade linux-image-azureUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.15.0-1153-azureUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-128-generic-lpaeUpgrade linux-image-5.15.0-1020-awsUpgrade linux-image-5.15.0-1016-intel-iotgUpgrade linux-image-dell300xUpgrade linux-image-5.4.0-1090-gcpUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-gke-5.4Upgrade linux-image-aws-lts-18.04Upgrade linux-image-5.15.0-1020-azureUpgrade linux-image-5.15.0-1015-ibmUpgrade linux-image-5.15.0-48-lowlatency-64kUpgrade linux-image-5.15.0-1018-gcpUpgrade linux-image-4.15.0-1054-dell300xUpgrade linux-image-4.15.0-194-genericUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1003-gkeopUpgrade linux-image-5.4.0-128-genericUpgrade linux-image-generic-64kUpgrade linux-image-5.15.0-1018-kvmUpgrade linux-image-aws-hweUpgrade linux-image-5.4.0-1071-raspiUpgrade linux-image-ibmUpgrade linux-image-5.15.0-1015-raspiUpgrade linux-image-5.4.0-1054-gkeopUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.4.0-1084-gkeUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-raspi2Upgrade linux-image-5.4.0-128-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-5.15.0-1018-oracleUpgrade linux-image-gke-5.15Upgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-1084-oracleUpgrade linux-image-azure-fdeUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-genericUpgrade linux-image-4.15.0-1107-oracleUpgrade linux-image-4.15.0-1137-gcpUpgrade linux-image-gkeUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-4.15.0-1142-awsUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-oracleUpgrade linux-image-5.4.0-1086-awsUpgrade linux-image-5.4.0-1092-azure-fdeUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-generic-lpaeUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-1034-ibmUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-5.4.0-1076-kvmUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-1128-kvmUpgrade linux-image-gkeopUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-bluefieldUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oemUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.4.0-1047-bluefieldUpgrade linux-image-5.15.0-48-generic-64k | Sep 21, 2022 | Jul 5, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 5, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub