Linux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Linux Block and Network PV device frontends don't zero memory regions before sharing them with the backend (CVE-2022-26365, CVE-2022-33740). Additionally the granularity of the grant table doesn't allow sharing less than a 4K page, leading to unrelated data residing in the same 4K page as data shared with a backend being accessible by such backend (CVE-2022-33741, CVE-2022-33742).
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade xen | Aug 22, 2024 | Jul 5, 2022 |
| Amazon Linux Ami 2 | — | Upgrade perfUpgrade kernel-toolsUpgrade perf-debuginfoUpgrade python-perfUpgrade kernel-tools-develUpgrade python-perf-debuginfoUpgrade kernelUpgrade kernel-livepatch-5.10.130-118.517Upgrade kernel-livepatch-4.14.287-215.504Upgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade bpftoolUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-livepatch-5.15.54-25.126Upgrade kernel-devel | Sep 30, 2022 | Jul 5, 2022 |
| Amazon_linux | — | Upgrade kernel | Aug 5, 2022 | Jul 5, 2022 |
| Debian | — | Upgrade linuxUpgrade xen | Oct 3, 2022 | Jul 5, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade python3-perfUpgrade kernel | Oct 11, 2022 | Jul 5, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perf | Sep 14, 2022 | Jul 5, 2022 |
| Suse | — | Upgrade dtb-freescaleUpgrade gfs2-kmp-defaultUpgrade kernel-vanillaUpgrade dlm-kmp-azureUpgrade kernel-zfcpdumpUpgrade kernel-64kb-livepatch-develUpgrade dtb-marvellUpgrade kernel-default-develUpgrade kernel-default-livepatchUpgrade gfs2-kmp-64kbUpgrade kernel-preempt-optionalUpgrade reiserfs-kmp-64kbUpgrade kernel-preempt-livepatch-develUpgrade kernel-default-manUpgrade kernel-default-livepatch-develUpgrade kernel-preempt-extraUpgrade kernel-symsUpgrade kernel-debug-develUpgrade cluster-md-kmp-preemptUpgrade kernel-zfcpdump-manUpgrade kernel-docsUpgrade kselftests-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-defaultUpgrade dlm-kmp-defaultUpgrade gfs2-kmp-preemptUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-vanilla-develUpgrade dtb-socionextUpgrade ocfs2-kmp-azureUpgrade cluster-md-kmp-64kbUpgrade dtb-amazonUpgrade reiserfs-kmp-preemptUpgrade dtb-appleUpgrade kernel-64kb-extraUpgrade kernel-64kb-optionalUpgrade kernel-64kb-develUpgrade kernel-docs-htmlUpgrade reiserfs-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade dtb-renesasUpgrade dtb-amdUpgrade kernel-preempt-develUpgrade dtb-broadcomUpgrade dtb-hisiliconUpgrade kernel-64kbUpgrade kernel-default-baseUpgrade xenUpgrade kernel-azure-extraUpgrade kselftests-kmp-azureUpgrade dtb-allwinnerUpgrade dtb-sprdUpgrade kernel-azure-baseUpgrade kernel-debugUpgrade kernel-debug-livepatch-develUpgrade kselftests-kmp-preemptUpgrade dtb-amlogicUpgrade ocfs2-kmp-preemptUpgrade kernel-source-vanillaUpgrade kernel-syms-azureUpgrade dtb-caviumUpgrade xen-toolsUpgrade kernel-azure-optionalUpgrade kernel-develUpgrade kernel-obs-qaUpgrade kernel-rtUpgrade cluster-md-kmp-azureUpgrade kernel-azure-livepatch-develUpgrade dtb-rockchipUpgrade dtb-qcomUpgrade dtb-alteraUpgrade dlm-kmp-preemptUpgrade dlm-kmp-64kbUpgrade dtb-exynosUpgrade dtb-xilinxUpgrade dtb-nvidiaUpgrade dtb-armUpgrade kernel-default-base-rebuildUpgrade kernel-debug-baseUpgrade kernel-kvmsmallUpgrade dtb-zteUpgrade xen-tools-domuUpgrade xen-libs-32bitUpgrade kernel-source-azureUpgrade kselftests-kmp-64kbUpgrade xen-develUpgrade kernel-default-optionalUpgrade gfs2-kmp-azureUpgrade xen-libsUpgrade kernel-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-kvmsmall-develUpgrade kernel-vanilla-livepatch-develUpgrade kernel-azure-develUpgrade kernel-preemptUpgrade xen-doc-htmlUpgrade kernel-obs-buildUpgrade kernel-devel-azureUpgrade dtb-lgUpgrade kernel-sourceUpgrade xen-tools-xendomains-wait-diskUpgrade kernel-vanilla-baseUpgrade dtb-apmUpgrade kernel-kvmsmall-baseUpgrade kernel-macrosUpgrade dtb-mediatekUpgrade reiserfs-kmp-azureUpgrade dtb-al | Oct 26, 2022 | Jul 5, 2022 |
| Ubuntu | — | Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-4.15.0-1120-raspi2Upgrade linux-image-kvmUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oem-20.04Upgrade linux-image-4.15.0-194-lowlatencyUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-aws-lts-18.04Upgrade linux-image-snapdragonUpgrade linux-image-4.15.0-1153-azureUpgrade linux-image-5.15.0-48-genericUpgrade linux-image-azure-lts-18.04Upgrade linux-image-5.15.0-1016-intel-iotgUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-azureUpgrade linux-image-5.15.0-48-lowlatencyUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gke-5.4Upgrade linux-image-5.15.0-1020-azureUpgrade linux-image-gcpUpgrade linux-image-4.15.0-1142-aws-hweUpgrade linux-image-4.15.0-194-generic-lpaeUpgrade linux-image-4.15.0-1138-snapdragonUpgrade linux-image-raspiUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-dell300xUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-oem-osp1Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-1090-gcpUpgrade linux-image-5.15.0-1018-gcpUpgrade linux-image-4.15.0-1054-dell300xUpgrade linux-image-5.15.0-48-lowlatency-64kUpgrade linux-image-4.15.0-194-genericUpgrade linux-image-5.15.0-48-generic-lpaeUpgrade linux-image-5.4.0-128-generic-lpaeUpgrade linux-image-5.15.0-1015-ibmUpgrade linux-image-5.15.0-1015-raspi-nolpaeUpgrade linux-image-5.15.0-1016-gkeUpgrade linux-image-intel-iotgUpgrade linux-image-awsUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1020-awsUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-aws-hweUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.4.0-1092-azure-fdeUpgrade linux-image-5.4.0-1034-ibmUpgrade linux-image-gkeopUpgrade linux-image-5.4.0-1054-gkeopUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-bluefieldUpgrade linux-image-genericUpgrade linux-image-5.4.0-1047-bluefieldUpgrade linux-image-5.4.0-1071-raspiUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-gkeUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-4.15.0-1142-awsUpgrade linux-image-lowlatency-64kUpgrade linux-image-4.15.0-1107-oracleUpgrade linux-image-5.4.0-1084-oracleUpgrade linux-image-oracleUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-5.15.0-1003-gkeopUpgrade linux-image-raspi2Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.4.0-128-lowlatencyUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.15.0-1018-oracleUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-128-genericUpgrade linux-image-lowlatencyUpgrade linux-image-4.15.0-1137-gcpUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-48-generic-64kUpgrade linux-image-generic-64kUpgrade linux-image-oemUpgrade linux-image-5.15.0-1018-kvmUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.4.0-1084-gkeUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.15.0-1015-raspiUpgrade linux-image-5.4.0-1076-kvmUpgrade linux-image-4.15.0-1128-kvmUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-virtualUpgrade linux-image-generic-lpaeUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-5.4.0-1086-awsUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-ibm | Sep 21, 2022 | Jul 5, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 5, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub