Arm guests can cause Dom0 DoS via PV devices When mapping pages of guests on Arm, dom0 is using an rbtree to keep track of the foreign mappings. Updating of that rbtree is not always done completely with the related lock held, resulting in a small race window, which can be used by unprivileged guests via PV devices to cause inconsistencies of the rbtree. These inconsistencies can lead to Denial of Service (DoS) of dom0, e.g. by causing crashes or the inability to perform further mappings of other guests' memory pages.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade xen | Oct 1, 2024 | Jul 5, 2022 |
| Amazon Linux Ami 2 | — | Upgrade kernel-livepatch-5.10.130-118.517Upgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernelUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade perf-debuginfoUpgrade python-perfUpgrade kernel-toolsUpgrade python-perf-debuginfoUpgrade bpftoolUpgrade kernel-livepatch-4.14.287-215.504 | Sep 30, 2022 | Jul 5, 2022 |
| Amazon_linux | — | Upgrade kernel | Aug 5, 2022 | Jul 5, 2022 |
| Debian | — | Upgrade linux | Oct 3, 2022 | Jul 5, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-tools | Oct 11, 2022 | Jul 5, 2022 |
| Ubuntu | — | Upgrade linux-image-lowlatency-64kUpgrade linux-image-4.15.0-1138-snapdragonUpgrade linux-image-5.15.0-1015-ibmUpgrade linux-image-oem-osp1Upgrade linux-image-4.15.0-194-generic-lpaeUpgrade linux-image-5.15.0-1015-raspiUpgrade linux-image-ibmUpgrade linux-image-5.15.0-48-generic-lpaeUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.15.0-1016-gkeUpgrade linux-image-gkeopUpgrade linux-image-5.15.0-1018-kvmUpgrade linux-image-gkeop-5.4Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-generic-lpaeUpgrade linux-image-gke-5.15Upgrade linux-image-genericUpgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-raspi2Upgrade linux-image-5.4.0-1090-gcpUpgrade linux-image-raspiUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-4.15.0-1120-raspi2Upgrade linux-image-5.15.0-48-generic-64kUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-5.4.0-1084-gkeUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-ibm-lts-20.04Upgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-generic-64kUpgrade linux-image-lowlatencyUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-5.4.0-1071-raspiUpgrade linux-image-5.4.0-128-lowlatencyUpgrade linux-image-5.4.0-1054-gkeopUpgrade linux-image-azureUpgrade linux-image-gcpUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-4.15.0-1142-awsUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.15.0-194-lowlatencyUpgrade linux-image-aws-hweUpgrade linux-image-aws-lts-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-5.4.0-1086-awsUpgrade linux-image-5.4.0-1092-azure-fdeUpgrade linux-image-5.4.0-1084-oracleUpgrade linux-image-4.15.0-194-genericUpgrade linux-image-dell300xUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-oemUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.15.0-1015-raspi-nolpaeUpgrade linux-image-5.15.0-1018-gcpUpgrade linux-image-4.15.0-1153-azureUpgrade linux-image-azure-lts-18.04Upgrade linux-image-intel-iotgUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-virtual-hwe-18.04Upgrade linux-image-bluefieldUpgrade linux-image-5.4.0-1034-ibmUpgrade linux-image-4.15.0-1142-aws-hweUpgrade linux-image-4.15.0-1054-dell300xUpgrade linux-image-5.15.0-1020-azureUpgrade linux-image-5.15.0-48-lowlatency-64kUpgrade linux-image-5.4.0-128-generic-lpaeUpgrade linux-image-oem-20.04Upgrade linux-image-oracleUpgrade linux-image-awsUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-virtualUpgrade linux-image-4.15.0-1128-kvmUpgrade linux-image-5.15.0-1020-awsUpgrade linux-image-5.15.0-1018-oracleUpgrade linux-image-gke-5.4Upgrade linux-image-5.4.0-1076-kvmUpgrade linux-image-5.4.0-1047-bluefieldUpgrade linux-image-snapdragonUpgrade linux-image-kvmUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-1003-gkeopUpgrade linux-image-5.4.0-128-genericUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-gkeUpgrade linux-image-5.15.0-48-genericUpgrade linux-image-5.15.0-1016-intel-iotgUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-4.15.0-1137-gcpUpgrade linux-image-aws-lts-18.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-4.15.0-1107-oracleUpgrade linux-image-5.15.0-48-lowlatency | Sep 21, 2022 | Jul 5, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 5, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub