Linux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Linux Block and Network PV device frontends don't zero memory regions before sharing them with the backend (CVE-2022-26365, CVE-2022-33740). Additionally the granularity of the grant table doesn't allow sharing less than a 4K page, leading to unrelated data residing in the same 4K page as data shared with a backend being accessible by such backend (CVE-2022-33741, CVE-2022-33742).
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade xen | Aug 22, 2024 | Jul 5, 2022 |
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade kernel-livepatch-4.14.287-215.504Upgrade kernel-livepatch-5.10.130-118.517Upgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade python-perf-debuginfoUpgrade kernelUpgrade perfUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.15.54-25.126Upgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-headersUpgrade kernel-develUpgrade bpftool | Sep 30, 2022 | Jul 5, 2022 |
| Amazon_linux | — | Upgrade kernel | Aug 5, 2022 | Jul 5, 2022 |
| Debian | — | Upgrade xenUpgrade linux | Oct 3, 2022 | Jul 5, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-toolsUpgrade kernel-tools-libsUpgrade bpftool | Oct 11, 2022 | Jul 5, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernelUpgrade python3-perf | Sep 14, 2022 | Jul 5, 2022 |
| Suse | — | Upgrade kernel-vanilla-livepatch-develUpgrade kselftests-kmp-preemptUpgrade cluster-md-kmp-azureUpgrade ocfs2-kmp-defaultUpgrade kernel-kvmsmall-baseUpgrade dtb-zteUpgrade xen-develUpgrade kernel-default-optionalUpgrade xen-tools-xendomains-wait-diskUpgrade kernel-vanilla-baseUpgrade kernel-default-extraUpgrade gfs2-kmp-azureUpgrade dtb-alUpgrade dtb-qcomUpgrade dlm-kmp-preemptUpgrade dtb-rockchipUpgrade kernel-azure-livepatch-develUpgrade dtb-apmUpgrade kernel-kvmsmall-develUpgrade dlm-kmp-64kbUpgrade dtb-alteraUpgrade dtb-caviumUpgrade kernel-sourceUpgrade dtb-lgUpgrade kernel-develUpgrade kernel-obs-qaUpgrade kernel-macrosUpgrade kernel-syms-azureUpgrade xen-toolsUpgrade dtb-mediatekUpgrade xen-libsUpgrade dtb-amlogicUpgrade kernel-source-vanillaUpgrade kernel-devel-azureUpgrade kernel-azure-develUpgrade kernel-debug-baseUpgrade xen-doc-htmlUpgrade kernel-azure-optionalUpgrade ocfs2-kmp-preemptUpgrade kernel-kvmsmallUpgrade kernel-rtUpgrade kernel-obs-buildUpgrade reiserfs-kmp-azureUpgrade xen-libs-32bitUpgrade kernel-default-base-rebuildUpgrade kselftests-kmp-64kbUpgrade kernel-azureUpgrade kernel-source-azureUpgrade dtb-nvidiaUpgrade dtb-armUpgrade dtb-exynosUpgrade dtb-xilinxUpgrade kernel-preemptUpgrade ocfs2-kmp-azureUpgrade kernel-zfcpdump-manUpgrade reiserfs-kmp-preemptUpgrade cluster-md-kmp-64kbUpgrade kernel-preempt-develUpgrade kernel-debug-livepatch-develUpgrade xenUpgrade dtb-renesasUpgrade dtb-amdUpgrade kernel-debug-develUpgrade dlm-kmp-defaultUpgrade kernel-default-manUpgrade kernel-default-livepatch-develUpgrade kernel-64kb-optionalUpgrade kernel-64kb-extraUpgrade kernel-64kb-develUpgrade dtb-hisiliconUpgrade dtb-broadcomUpgrade kernel-64kbUpgrade kernel-preempt-livepatch-develUpgrade kernel-defaultUpgrade kernel-preempt-extraUpgrade reiserfs-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade dtb-amazonUpgrade kernel-kvmsmall-livepatch-develUpgrade gfs2-kmp-preemptUpgrade kernel-default-develUpgrade gfs2-kmp-defaultUpgrade kernel-azure-extraUpgrade kernel-debugUpgrade dtb-allwinnerUpgrade dtb-sprdUpgrade kernel-default-baseUpgrade kernel-azure-baseUpgrade xen-tools-domUUpgrade cluster-md-kmp-preemptUpgrade kernel-preempt-optionalUpgrade dtb-freescaleUpgrade kselftests-kmp-defaultUpgrade kselftests-kmp-azureUpgrade kernel-vanilla-develUpgrade dtb-socionextUpgrade dlm-kmp-azureUpgrade kernel-symsUpgrade kernel-docsUpgrade kernel-vanillaUpgrade kernel-default-livepatchUpgrade gfs2-kmp-64kbUpgrade kernel-zfcpdumpUpgrade dtb-appleUpgrade kernel-docs-htmlUpgrade dtb-marvellUpgrade reiserfs-kmp-64kbUpgrade kernel-64kb-livepatch-develUpgrade cluster-md-kmp-default | Oct 26, 2022 | Jul 5, 2022 |
| Ubuntu | — | Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-aws-hweUpgrade linux-image-oemUpgrade linux-image-5.4.0-1084-gkeUpgrade linux-image-4.15.0-1107-oracleUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-generic-lpaeUpgrade linux-image-4.15.0-1142-awsUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.4.0-128-genericUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-64kUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-5.15.0-1018-kvmUpgrade linux-image-5.4.0-1071-raspiUpgrade linux-image-5.4.0-128-lowlatencyUpgrade linux-image-5.15.0-1018-oracleUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.15.0-48-generic-64kUpgrade linux-image-5.4.0-1092-azure-fdeUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-lowlatencyUpgrade linux-image-5.4.0-1086-awsUpgrade linux-image-5.4.0-1047-bluefieldUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-oracleUpgrade linux-image-gke-5.15Upgrade linux-image-4.15.0-1137-gcpUpgrade linux-image-azure-fdeUpgrade linux-image-5.4.0-1076-kvmUpgrade linux-image-5.15.0-1015-raspiUpgrade linux-image-raspi2Upgrade linux-image-genericUpgrade linux-image-virtualUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-bluefieldUpgrade linux-image-5.4.0-1034-ibmUpgrade linux-image-4.15.0-1128-kvmUpgrade linux-image-5.15.0-1003-gkeopUpgrade linux-image-gkeUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.4.0-1054-gkeopUpgrade linux-image-raspi-nolpaeUpgrade linux-image-gkeopUpgrade linux-image-ibmUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-1084-oracleUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-4.15.0-1120-raspi2Upgrade linux-image-5.15.0-1018-gcpUpgrade linux-image-5.4.0-128-generic-lpaeUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-5.15.0-48-lowlatency-64kUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1015-ibmUpgrade linux-image-azure-lts-18.04Upgrade linux-image-intel-iotgUpgrade linux-image-awsUpgrade linux-image-5.15.0-1016-gkeUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gcpUpgrade linux-image-4.15.0-194-generic-lpaeUpgrade linux-image-aws-lts-18.04Upgrade linux-image-4.15.0-194-genericUpgrade linux-image-gkeop-5.15Upgrade linux-image-azureUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-4.15.0-1138-snapdragonUpgrade linux-image-5.15.0-48-generic-lpaeUpgrade linux-image-5.15.0-1015-raspi-nolpaeUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-oem-20.04Upgrade linux-image-4.15.0-194-lowlatencyUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-4.15.0-1142-aws-hweUpgrade linux-image-kvmUpgrade linux-image-5.4.0-1090-gcpUpgrade linux-image-dell300xUpgrade linux-image-4.15.0-1153-azureUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.15.0-48-genericUpgrade linux-image-snapdragonUpgrade linux-image-5.15.0-48-lowlatencyUpgrade linux-image-gke-5.4Upgrade linux-image-5.15.0-1020-azureUpgrade linux-image-5.15.0-1016-intel-iotgUpgrade linux-image-5.15.0-1020-awsUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-oem-osp1Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-raspiUpgrade linux-image-4.15.0-1054-dell300x | Sep 21, 2022 | Jul 5, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 5, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub