Guests can trigger deadlock in Linux netback driver T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] The patch for XSA-392 introduced another issue which might result in a deadlock when trying to free the SKB of a packet dropped due to the XSA-392 handling (CVE-2022-42328). Additionally when dropping packages for other reasons the same deadlock could occur in case of netpoll being active for the interface the xen-netback driver is connected to (CVE-2022-42329).
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade kernel-livepatch-4.14.304-226.531Upgrade bpftool-debuginfoUpgrade kernel-headersUpgrade kernelUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.15.86-53.137Upgrade python-perf-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-toolsUpgrade perfUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.10.162-141.675Upgrade bpftool | Apr 5, 2023 | Dec 7, 2022 |
| Amazon_linux | — | Upgrade kernel | Apr 5, 2023 | Dec 7, 2022 |
| Amazon_linux_2023 | — | Upgrade kernel-headersUpgrade kernelUpgrade kernel-libbpf-develUpgrade perfUpgrade python3-perfUpgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade bpftoolUpgrade python3-perf-debuginfoUpgrade kernel-libbpfUpgrade kernel-libbpf-staticUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-tools-debuginfoUpgrade kernel-develUpgrade kernel-livepatch-6.1.10-15.42 | Feb 17, 2025 | Dec 8, 2022 |
| Debian | — | Upgrade linux | Dec 22, 2022 | Dec 7, 2022 |
| Suse | — | Upgrade kernel-azure-optionalUpgrade kernel-default-manUpgrade kselftests-kmp-azureUpgrade dlm-kmp-defaultUpgrade kernel-docs-htmlUpgrade dtb-alUpgrade cluster-md-kmp-defaultUpgrade kernel-vanilla-livepatch-develUpgrade kernel-sourceUpgrade kernel-syms-rtUpgrade dtb-marvellUpgrade kernel-kvmsmall-baseUpgrade dtb-socionextUpgrade kernel-preemptUpgrade kernel-docsUpgrade dtb-rockchipUpgrade kernel-debug-livepatch-develUpgrade kernel-devel-azureUpgrade gfs2-kmp-rtUpgrade dtb-nvidiaUpgrade dtb-broadcomUpgrade kernel-azure-baseUpgrade kernel-azureUpgrade kernel-azure-livepatch-develUpgrade kernel-default-extraUpgrade dtb-sprdUpgrade dtb-qcomUpgrade kernel-defaultUpgrade ocfs2-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-default-base-rebuildUpgrade kernel-vanilla-develUpgrade reiserfs-kmp-64kbUpgrade dtb-zteUpgrade kernel-source-rtUpgrade kernel-azure-develUpgrade kernel-kvmsmallUpgrade kernel-obs-qaUpgrade kernel-rt_debugUpgrade kernel-default-livepatchUpgrade dtb-amlogicUpgrade kernel-rt_debug-develUpgrade cluster-md-kmp-64kbUpgrade dlm-kmp-rtUpgrade kernel-debug-baseUpgrade dlm-kmp-azureUpgrade kernel-macrosUpgrade kernel-syms-azureUpgrade kselftests-kmp-defaultUpgrade dtb-exynosUpgrade kernel-obs-buildUpgrade kernel-rtUpgrade dtb-appleUpgrade kernel-debug-develUpgrade dtb-xilinxUpgrade dtb-armUpgrade dtb-renesasUpgrade gfs2-kmp-64kbUpgrade dtb-alteraUpgrade kernel-64kbUpgrade dtb-hisiliconUpgrade cluster-md-kmp-azureUpgrade dtb-apmUpgrade dtb-lgUpgrade cluster-md-kmp-rtUpgrade ocfs2-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kselftests-kmp-64kbUpgrade kernel-kvmsmall-develUpgrade kernel-64kb-optionalUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-manUpgrade kernel-default-baseUpgrade kernel-64kb-livepatch-develUpgrade gfs2-kmp-azureUpgrade kernel-vanillaUpgrade kernel-rt-develUpgrade kernel-kvmsmall-livepatch-develUpgrade dlm-kmp-64kbUpgrade kernel-preempt-develUpgrade dtb-freescaleUpgrade reiserfs-kmp-azureUpgrade kernel-vanilla-baseUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-64kb-develUpgrade dtb-mediatekUpgrade kernel-source-azureUpgrade kernel-devel-rtUpgrade dtb-caviumUpgrade dtb-amdUpgrade kernel-symsUpgrade kernel-default-livepatch-develUpgrade gfs2-kmp-defaultUpgrade kernel-64kb-extraUpgrade ocfs2-kmp-azureUpgrade kernel-default-optionalUpgrade dtb-amazonUpgrade kernel-default-develUpgrade ocfs2-kmp-defaultUpgrade kernel-azure-extraUpgrade dtb-allwinner | Dec 19, 2022 | Dec 7, 2022 |
| Ubuntu | — | Upgrade linux-image-gkeop-5.15Upgrade linux-image-5.4.0-144-genericUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1030-gcpUpgrade linux-image-5.4.0-1095-gkeUpgrade linux-image-5.15.0-1016-gkeopUpgrade linux-image-5.19.0-1022-azureUpgrade linux-image-4.15.0-1115-oracleUpgrade linux-image-4.15.0-1136-kvmUpgrade linux-image-aws-hweUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.19.0-1021-lowlatencyUpgrade linux-image-4.15.0-1146-snapdragonUpgrade linux-image-5.19.0-1022-awsUpgrade linux-image-raspi-nolpaeUpgrade linux-image-5.15.0-1025-raspi-nolpaeUpgrade linux-image-azure-fdeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-4.15.0-206-lowlatencyUpgrade linux-image-dell300xUpgrade linux-image-5.15.0-1031-awsUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-raspi2Upgrade linux-image-awsUpgrade linux-image-gke-5.4Upgrade linux-image-5.15.0-1029-kvmUpgrade linux-image-generic-hwe-18.04Upgrade linux-image-bluefieldUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-5.15.0-67-lowlatency-64kUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1034-azure-fdeUpgrade linux-image-oracleUpgrade linux-image-4.15.0-1162-azureUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.15.0-1025-raspiUpgrade linux-image-5.4.0-1081-raspiUpgrade linux-image-5.4.0-1104-azureUpgrade linux-image-5.15.0-67-genericUpgrade linux-image-kvmUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-genericUpgrade linux-image-generic-lpaeUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-virtual-hwe-20.04Upgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.4.0-1045-ibmUpgrade linux-image-5.15.0-67-generic-64kUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.15.0-206-genericUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-oem-osp1Upgrade linux-image-4.15.0-206-generic-lpaeUpgrade linux-image-snapdragonUpgrade linux-image-5.4.0-1087-kvmUpgrade linux-image-intel-iotgUpgrade linux-image-5.19.0-38-generic-64kUpgrade linux-image-azure-lts-18.04Upgrade linux-image-oracle-lts-20.04Upgrade linux-image-4.15.0-1146-gcpUpgrade linux-image-raspiUpgrade linux-image-5.4.0-1059-bluefieldUpgrade linux-image-oemUpgrade linux-image-ibmUpgrade linux-image-azureUpgrade linux-image-gke-5.15Upgrade linux-image-5.4.0-1094-oracleUpgrade linux-image-5.4.0-1101-gcpUpgrade linux-image-aws-lts-18.04Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.15.0-1026-ibmUpgrade linux-image-5.4.0-1065-gkeopUpgrade linux-image-5.15.0-1030-oracleUpgrade linux-image-azure-lts-20.04Upgrade linux-image-5.15.0-1026-intel-iotgUpgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-5.4.0-1097-awsUpgrade linux-image-gkeUpgrade linux-image-5.19.0-38-generic-lpaeUpgrade linux-image-5.15.0-67-generic-lpaeUpgrade linux-image-5.19.0-1019-oracleUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.4.0-144-lowlatencyUpgrade linux-image-5.4.0-144-generic-lpaeUpgrade linux-image-5.19.0-1015-raspiUpgrade linux-image-5.19.0-1015-raspi-nolpaeUpgrade linux-image-5.19.0-1019-gcpUpgrade linux-image-4.15.0-1128-raspi2Upgrade linux-image-5.15.0-1034-azureUpgrade linux-image-lowlatency-64kUpgrade linux-image-5.19.0-1020-kvmUpgrade linux-image-5.19.0-38-genericUpgrade linux-image-gcpUpgrade linux-image-gkeopUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-5.19.0-1021-lowlatency-64kUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.15.0-1028-gkeUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-67-lowlatencyUpgrade linux-image-4.15.0-1151-awsUpgrade linux-image-lowlatencyUpgrade linux-image-generic-64kUpgrade linux-image-virtualUpgrade linux-image-5.19.0-1019-ibmUpgrade linux-image-4.15.0-1061-dell300x | Mar 22, 2023 | Dec 7, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 7, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub