Linux disk/nic frontends data leaks T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Linux Block and Network PV device frontends don't zero memory regions before sharing them with the backend (CVE-2022-26365, CVE-2022-33740). Additionally the granularity of the grant table doesn't allow sharing less than a 4K page, leading to unrelated data residing in the same 4K page as data shared with a backend being accessible by such backend (CVE-2022-33741, CVE-2022-33742).
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade xen | Aug 22, 2024 | Jul 5, 2022 |
| Amazon Linux Ami 2 | — | Upgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.15.54-25.126Upgrade kernel-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-develUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade python-perfUpgrade perfUpgrade kernel-livepatch-5.10.130-118.517Upgrade perf-debuginfoUpgrade kernelUpgrade kernel-livepatch-4.14.287-215.504Upgrade python-perf-debuginfoUpgrade kernel-toolsUpgrade kernel-tools-devel | Sep 30, 2022 | Jul 5, 2022 |
| Amazon_linux | — | Upgrade kernel | Aug 5, 2022 | Jul 5, 2022 |
| Debian | — | Upgrade linuxUpgrade xen | Oct 3, 2022 | Jul 5, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libs | Oct 11, 2022 | Jul 5, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel | Sep 14, 2022 | Jul 5, 2022 |
| Suse | — | Upgrade kernel-azure-livepatch-develUpgrade dlm-kmp-preemptUpgrade dlm-kmp-64kbUpgrade dtb-alteraUpgrade dtb-qcomUpgrade ocfs2-kmp-preemptUpgrade kernel-rtUpgrade kernel-azure-optionalUpgrade dtb-amlogicUpgrade kernel-azureUpgrade kselftests-kmp-64kbUpgrade reiserfs-kmp-azureUpgrade xen-libs-32bitUpgrade kernel-obs-qaUpgrade kernel-source-vanillaUpgrade xen-tools-domuUpgrade dtb-lgUpgrade cluster-md-kmp-azureUpgrade xen-doc-htmlUpgrade kernel-devel-azureUpgrade dtb-mediatekUpgrade kselftests-kmp-preemptUpgrade dtb-zteUpgrade kernel-kvmsmallUpgrade kernel-sourceUpgrade kernel-vanilla-baseUpgrade dtb-caviumUpgrade xen-tools-xendomains-wait-diskUpgrade dtb-exynosUpgrade kernel-preemptUpgrade dtb-rockchipUpgrade dtb-apmUpgrade dtb-nvidiaUpgrade kernel-debug-baseUpgrade dtb-armUpgrade kernel-default-base-rebuildUpgrade kernel-kvmsmall-baseUpgrade dtb-xilinxUpgrade kernel-source-azureUpgrade kernel-macrosUpgrade xen-develUpgrade xen-libsUpgrade ocfs2-kmp-defaultUpgrade kernel-default-optionalUpgrade gfs2-kmp-azureUpgrade kernel-azure-develUpgrade kernel-vanilla-livepatch-develUpgrade kernel-kvmsmall-develUpgrade kernel-syms-azureUpgrade xen-toolsUpgrade kernel-obs-buildUpgrade dtb-alUpgrade kernel-default-extraUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-preempt-develUpgrade cluster-md-kmp-defaultUpgrade kernel-default-livepatchUpgrade kernel-vanillaUpgrade xenUpgrade kernel-64kb-optionalUpgrade kernel-kvmsmall-livepatch-develUpgrade dtb-amazonUpgrade kernel-vanilla-develUpgrade dtb-freescaleUpgrade kernel-preempt-livepatch-develUpgrade cluster-md-kmp-preemptUpgrade kernel-defaultUpgrade kselftests-kmp-azureUpgrade dtb-allwinnerUpgrade kernel-debug-livepatch-develUpgrade kernel-azure-extraUpgrade kernel-azure-baseUpgrade dtb-sprdUpgrade reiserfs-kmp-defaultUpgrade dtb-broadcomUpgrade dtb-hisiliconUpgrade kernel-preempt-extraUpgrade dlm-kmp-azureUpgrade gfs2-kmp-64kbUpgrade dlm-kmp-defaultUpgrade dtb-amdUpgrade kernel-docsUpgrade kernel-64kb-develUpgrade kernel-symsUpgrade kernel-preempt-optionalUpgrade dtb-socionextUpgrade kernel-64kb-extraUpgrade kernel-64kbUpgrade reiserfs-kmp-preemptUpgrade kselftests-kmp-defaultUpgrade gfs2-kmp-preemptUpgrade dtb-renesasUpgrade reiserfs-kmp-64kbUpgrade dtb-marvellUpgrade cluster-md-kmp-64kbUpgrade dtb-appleUpgrade gfs2-kmp-defaultUpgrade kernel-default-baseUpgrade kernel-default-develUpgrade ocfs2-kmp-azureUpgrade kernel-docs-htmlUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-livepatch-develUpgrade kernel-zfcpdumpUpgrade kernel-debug-develUpgrade kernel-zfcpdump-manUpgrade kernel-default-manUpgrade ocfs2-kmp-64kb | Oct 26, 2022 | Jul 5, 2022 |
| Ubuntu | — | Upgrade linux-image-virtualUpgrade linux-image-bluefieldUpgrade linux-image-5.4.0-1084-gkeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-ibmUpgrade linux-image-4.15.0-1128-kvmUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.15.0-1018-oracleUpgrade linux-image-raspi-nolpaeUpgrade linux-image-gkeopUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.4.0-1076-kvmUpgrade linux-image-4.15.0-1137-gcpUpgrade linux-image-aws-lts-20.04Upgrade linux-image-5.4.0-1034-ibmUpgrade linux-image-oracleUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.4.0-1054-gkeopUpgrade linux-image-5.4.0-1071-raspiUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.15.0-1018-kvmUpgrade linux-image-generic-lpaeUpgrade linux-image-aws-hweUpgrade linux-image-5.4.0-128-genericUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.15.0-48-generic-64kUpgrade linux-image-5.4.0-128-lowlatencyUpgrade linux-image-5.4.0-1084-oracleUpgrade linux-image-azure-fdeUpgrade linux-image-oemUpgrade linux-image-5.4.0-1092-azure-fdeUpgrade linux-image-lowlatencyUpgrade linux-image-raspi2Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-5.4.0-1086-awsUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.4.0-1047-bluefieldUpgrade linux-image-generic-64kUpgrade linux-image-gkeUpgrade linux-image-4.15.0-1107-oracleUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.15.0-1015-raspiUpgrade linux-image-4.15.0-1142-awsUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-gkeop-5.4Upgrade linux-image-genericUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1003-gkeopUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.15.0-48-lowlatencyUpgrade linux-image-gcpUpgrade linux-image-snapdragonUpgrade linux-image-5.15.0-48-genericUpgrade linux-image-oem-osp1Upgrade linux-image-4.15.0-194-generic-lpaeUpgrade linux-image-intel-iotgUpgrade linux-image-kvmUpgrade linux-image-4.15.0-1120-raspi2Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-awsUpgrade linux-image-5.15.0-1015-ibmUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-4.15.0-194-genericUpgrade linux-image-5.15.0-1018-gcpUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1015-raspi-nolpaeUpgrade linux-image-4.15.0-1054-dell300xUpgrade linux-image-4.15.0-194-lowlatencyUpgrade linux-image-gkeop-5.15Upgrade linux-image-4.15.0-1142-aws-hweUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-raspiUpgrade linux-image-5.15.0-48-lowlatency-64kUpgrade linux-image-azure-lts-18.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-5.4.0-128-generic-lpaeUpgrade linux-image-5.15.0-1016-gkeUpgrade linux-image-azureUpgrade linux-image-5.4.0-1090-gcpUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.15.0-48-generic-lpaeUpgrade linux-image-5.15.0-1020-azureUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-gke-5.4Upgrade linux-image-5.15.0-1020-awsUpgrade linux-image-5.15.0-1016-intel-iotgUpgrade linux-image-4.15.0-1153-azureUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-dell300xUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-aws-lts-18.04Upgrade linux-image-4.15.0-1138-snapdragonUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-oem-20.04 | Sep 21, 2022 | Jul 5, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 5, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub