PT-2025-37511

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw exists in the Linux kernel's Xen/gntdev component that can lead to grant references being leaked. This occurs when a grant mapping operation fails partially, resulting in...

PT-2025-33793

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The Linux kernel contains a use-after-free UAF vulnerability in the dmabuf exp from pages function within the Xen component. This issue occurs because a file descriptor can be closed b...

GSD-2022-1007670 xen/gntdev: Prevent leaking grants

xen/gntdev: Prevent leaking grants This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.332 by commit b043f2cab100bed3e0a999dcf38cc05b1e4a7e41, ...

GSD-2022-1007610 xen/gntdev: Prevent leaking grants

xen/gntdev: Prevent leaking grants This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.298 by commit 49bb053b1ec367b6883030eb2cca696e91435679,...

GSD-2022-1007537 xen/gntdev: Prevent leaking grants

xen/gntdev: Prevent leaking grants This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.264 by commit cb1ccfe7655380f77a58b340072f5f40bc285902,...

GSD-2022-1007318 xen/gntdev: Prevent leaking grants

xen/gntdev: Prevent leaking grants This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.153 by commit 49db6cb81400ba863e1a85e55fcdf1031807c23f,...

GSD-2022-1007317 xen/gntdev: Accommodate VMA splitting

xen/gntdev: Accommodate VMA splitting This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.152 by commit...

GSD-2022-1007137 xen/gntdev: Accommodate VMA splitting

xen/gntdev: Accommodate VMA splitting This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.75 by commit 7c16d0a4e6a436b4e7c92bead3fab55aaa4c114...

GSD-2022-1006901 xen/gntdev: Accommodate VMA splitting

xen/gntdev: Accommodate VMA splitting This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit cdafa219ace013c594e2491158ad1b51f9923dde,...

GSD-2022-1006899 xen/gntdev: Prevent leaking grants

xen/gntdev: Prevent leaking grants This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.3 by commit 273f6a4f71be12e2ec80a4919837d6e4fa933a04, it...

PT-2022-35865 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 4.14.287 through 4.14.297 Description: The issue is related to leaking grants in xen/gntdev. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions 4.14.287 through...

PT-2022-35154 · Xen +1 · Xen/Gntdev +1

Name of the Vulnerable Software and Affected Versions: xen/gntdev versions v5.19 through v6.0.2 Description: The issue is related to leaking grants in xen/gntdev. The actual impact and attack plausibility have not yet been proven. It was introduced in version v5.19 and fixed in Linux Kernel versi...

PT-2022-35392 · Xen +1 · Xen/Gntdev +1

Name of the Vulnerable Software and Affected Versions: xen/gntdev versions prior to v5.15.75 Description: The issue is related to VMA splitting in xen/gntdev. It was introduced in version v2.6.38 and fixed in Linux Kernel version v5.15.75. The actual impact and attack plausibility have not yet be...

PT-2022-35156 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue is related to the xen/gntdev component and its handling of VMA splitting. The actual impact and attack plausibility have not yet been proven. Recommendations: For versions prior to...

PT-2022-35572 · Xen +1 · Xen/Gntdev +1

Name of the Vulnerable Software and Affected Versions: xen/gntdev versions prior to v5.10.152 Description: The issue is related to VMA splitting in xen/gntdev. It was introduced in version v2.6.38 and fixed in Linux Kernel version v5.10.152. The actual impact and attack plausibility have not yet...

PT-2022-35391 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.75 Description: The issue is related to a potential security vulnerability in the xen/gntdev component. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

Unbreakable Enterprise kernel-container security update

4.14.35-2047.500.10.el7 - xen-blkback: fix error handling in xenblkbkmap Jan Beulich Orabug: 32492110 CVE-2021-26930 - xen-scsiback: don't 'handle' error by BUG Jan Beulich Orabug: 32492102 CVE-2021-26931 - xen-netback: don't 'handle' error by BUG Jan Beulich Orabug: 32492102 CVE-2021-26931 -...

UBUNTU-CVE-2021-26932

An issue was discovered in the Linux kernel 3.2 through 5.10.16, as used by Xen. Grant mapping operations often occur in batch hypercalls, where a number of operations are done in a single hypercall, the success or failure of each one is reported to the backend driver, and the backend driver then...

Unbreakable Enterprise kernel security update

5.4.17-2036.103.3.1uek - xen-blkback: fix error handling in xenblkbkmap Jan Beulich Orabug: 32492109 CVE-2021-26930 - xen-scsiback: don't 'handle' error by BUG Jan Beulich Orabug: 32492101 CVE-2021-26931 - xen-netback: don't 'handle' error by BUG Jan Beulich Orabug: 32492101 CVE-2021-26931 -...

Unbreakable Enterprise kernel security update

4.14.35-2047.500.9.1 - xen-blkback: fix error handling in xenblkbkmap Jan Beulich Orabug: 32492110 CVE-2021-26930 - xen-scsiback: dont 'handle' error by BUG Jan Beulich Orabug: 32492102 CVE-2021-26931 - xen-netback: dont 'handle' error by BUG Jan Beulich Orabug: 32492102 CVE-2021-26931 -...