Linux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Linux Block and Network PV device frontends don't zero memory regions before sharing them with the backend (CVE-2022-26365, CVE-2022-33740). Additionally the granularity of the grant table doesn't allow sharing less than a 4K page, leading to unrelated data residing in the same 4K page as data shared with a backend being accessible by such backend (CVE-2022-33741, CVE-2022-33742).
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade xen | Aug 22, 2024 | Jul 5, 2022 |
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.15.54-25.126Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfo-common-aarch64Upgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernel-toolsUpgrade python-perf-debuginfoUpgrade kernel-livepatch-4.14.287-215.504Upgrade kernelUpgrade kernel-livepatch-5.10.130-118.517Upgrade perf-debuginfoUpgrade python-perfUpgrade perfUpgrade kernel-tools-devel | Sep 30, 2022 | Jul 5, 2022 |
| Amazon_linux | — | Upgrade kernel | Aug 5, 2022 | Jul 5, 2022 |
| Debian | — | Upgrade linuxUpgrade xen | Oct 3, 2022 | Jul 5, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-tools | Oct 11, 2022 | Jul 5, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel | Sep 14, 2022 | Jul 5, 2022 |
| Suse | — | Upgrade kernel-devel-azureUpgrade kernel-develUpgrade dtb-lgUpgrade xen-libsUpgrade kernel-obs-qaUpgrade kselftests-kmp-preemptUpgrade dtb-exynosUpgrade kernel-kvmsmall-develUpgrade kernel-macrosUpgrade dtb-alUpgrade cluster-md-kmp-azureUpgrade kernel-default-optionalUpgrade kernel-source-vanillaUpgrade dtb-alteraUpgrade kernel-vanilla-livepatch-develUpgrade kernel-syms-azureUpgrade xen-toolsUpgrade gfs2-kmp-azureUpgrade kernel-azure-optionalUpgrade xen-doc-htmlUpgrade kernel-azure-develUpgrade kernel-default-extraUpgrade kernel-sourceUpgrade dtb-caviumUpgrade dtb-amlogicUpgrade dtb-apmUpgrade kernel-default-base-rebuildUpgrade ocfs2-kmp-defaultUpgrade xen-libs-32bitUpgrade xen-develUpgrade kernel-preemptUpgrade kernel-rtUpgrade kernel-kvmsmall-baseUpgrade kernel-vanilla-baseUpgrade xen-tools-xendomains-wait-diskUpgrade dtb-armUpgrade kernel-obs-buildUpgrade kernel-debug-baseUpgrade ocfs2-kmp-preemptUpgrade dtb-nvidiaUpgrade kernel-source-azureUpgrade dtb-xilinxUpgrade dlm-kmp-preemptUpgrade dtb-rockchipUpgrade kselftests-kmp-64kbUpgrade dtb-qcomUpgrade kernel-kvmsmallUpgrade kernel-azure-livepatch-develUpgrade dlm-kmp-64kbUpgrade dtb-zteUpgrade kernel-azureUpgrade reiserfs-kmp-azureUpgrade dtb-mediatekUpgrade kernel-debugUpgrade kernel-default-baseUpgrade reiserfs-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-optionalUpgrade kernel-preempt-extraUpgrade dtb-hisiliconUpgrade cluster-md-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade cluster-md-kmp-preemptUpgrade kernel-docsUpgrade kernel-default-livepatchUpgrade kernel-zfcpdumpUpgrade kernel-default-develUpgrade cluster-md-kmp-64kbUpgrade gfs2-kmp-64kbUpgrade kernel-kvmsmall-livepatch-develUpgrade gfs2-kmp-defaultUpgrade kernel-vanilla-develUpgrade dtb-socionextUpgrade xen-tools-domUUpgrade kselftests-kmp-defaultUpgrade gfs2-kmp-preemptUpgrade reiserfs-kmp-preemptUpgrade kernel-azure-baseUpgrade dtb-allwinnerUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-extraUpgrade kselftests-kmp-azureUpgrade dtb-sprdUpgrade kernel-symsUpgrade dtb-freescaleUpgrade dtb-amazonUpgrade dlm-kmp-azureUpgrade kernel-preempt-optionalUpgrade kernel-preempt-develUpgrade dtb-marvellUpgrade ocfs2-kmp-azureUpgrade kernel-docs-htmlUpgrade reiserfs-kmp-64kbUpgrade kernel-vanillaUpgrade dlm-kmp-defaultUpgrade dtb-renesasUpgrade dtb-appleUpgrade kernel-64kb-livepatch-develUpgrade kernel-64kb-develUpgrade kernel-defaultUpgrade kernel-debug-develUpgrade kernel-preempt-livepatch-develUpgrade xenUpgrade kernel-64kb-extraUpgrade kernel-64kbUpgrade kernel-zfcpdump-manUpgrade dtb-broadcomUpgrade dtb-amdUpgrade kernel-default-man | Oct 26, 2022 | Jul 5, 2022 |
| Ubuntu | — | Upgrade linux-image-4.15.0-1137-gcpUpgrade linux-image-5.4.0-1092-azure-fdeUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1003-gkeopUpgrade linux-image-virtualUpgrade linux-image-azure-fdeUpgrade linux-image-gke-5.15Upgrade linux-image-5.4.0-1086-awsUpgrade linux-image-5.4.0-128-lowlatencyUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.4.0-128-genericUpgrade linux-image-4.15.0-1142-awsUpgrade linux-image-gkeUpgrade linux-image-lowlatency-64kUpgrade linux-image-gkeop-5.4Upgrade linux-image-genericUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-1054-gkeopUpgrade linux-image-5.4.0-1084-oracleUpgrade linux-image-gkeopUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-1034-ibmUpgrade linux-image-4.15.0-1107-oracleUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.4.0-1084-gkeUpgrade linux-image-5.15.0-1015-raspiUpgrade linux-image-5.4.0-1076-kvmUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-ibmUpgrade linux-image-5.4.0-1047-bluefieldUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.4.0-1071-raspiUpgrade linux-image-aws-hweUpgrade linux-image-oracleUpgrade linux-image-raspi2Upgrade linux-image-5.15.0-1018-kvmUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-48-generic-64kUpgrade linux-image-4.15.0-1128-kvmUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.15.0-1018-oracleUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-oemUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-bluefieldUpgrade linux-image-generic-64kUpgrade linux-image-awsUpgrade linux-image-5.15.0-48-lowlatency-64kUpgrade linux-image-5.15.0-1018-gcpUpgrade linux-image-5.4.0-128-generic-lpaeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-5.15.0-1015-raspi-nolpaeUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-oem-osp1Upgrade linux-image-5.15.0-1015-ibmUpgrade linux-image-azureUpgrade linux-image-gkeop-5.15Upgrade linux-image-4.15.0-1120-raspi2Upgrade linux-image-4.15.0-1142-aws-hweUpgrade linux-image-5.15.0-48-generic-lpaeUpgrade linux-image-5.15.0-1020-awsUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-4.15.0-1138-snapdragonUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-5.15.0-48-genericUpgrade linux-image-intel-iotgUpgrade linux-image-oem-20.04Upgrade linux-image-snapdragonUpgrade linux-image-kvmUpgrade linux-image-4.15.0-194-genericUpgrade linux-image-gcpUpgrade linux-image-4.15.0-194-lowlatencyUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.15.0-48-lowlatencyUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.15.0-1054-dell300xUpgrade linux-image-5.15.0-1016-gkeUpgrade linux-image-raspiUpgrade linux-image-5.15.0-1016-intel-iotgUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-4.15.0-1153-azureUpgrade linux-image-5.15.0-1020-azureUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-gke-5.4Upgrade linux-image-5.4.0-1090-gcpUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-dell300xUpgrade linux-image-4.15.0-194-generic-lpae | Sep 21, 2022 | Jul 5, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 5, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub