PT-2023-33396 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v4.19.269 Description: The issue is related to a potential security vulnerability in the xen-netfront component. It was introduced in version v2.6.24 and fixed in version v4.19.269. The actual impact and attack...

PT-2023-33350 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions 2.6.24 through 5.4.226 Description: The issue is related to a potential security problem in the xen-netfront component. It was introduced in version v2.6.24 and fixed in version v5.4.227. The actual impact and attack...

PT-2023-33208 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.83 Description: The issue is related to a potential security problem in the xen-netfront component. It was introduced in version v2.6.24 and fixed in version v5.15.83. The actual impact and attack...

PT-2023-33106 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.13 Description: The issue is related to a NULL string after live migration in xen-netfront. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions pri...

Ubuntu 20.04 LTS : Linux kernel (GCP) vulnerabilities (USN-5644-1)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-5644-1 advisory. It was discovered that the framebuffer driver on the Linux kernel did not verify size limits when changing font or screen size, leading to an out-of-...

The vulnerability of the netfront component in the Xen hypervisor allows a attacker to trigger a service failure.

The vulnerability of the netfront component in the Xen hypervisor is related to resource release errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the netfront component in the Xen hypervisor allows a attacker to trigger a service failure.

The vulnerability of the netfront component in Xen hypervisors arises due to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerabilities of components such as blkfront, netfront, scsifront, usbfront, dmabuf, xenbus, 9p, kbdfront, and pvcalls in the Xen hypervisor allow a malicious actor to cause service failures.

The vulnerabilities of the components blkfront, netfront, scsifront, usbfront, dmabuf, xenbus, 9p, kbdfront, and pvcalls in the Xen hypervisor are caused by synchronization errors when using a shared resource. Exploiting these vulnerabilities can allow attackers to cause service failures...

GSD-2022-1004927 xen/netfront: fix leaking data in shared pages

xen/netfront: fix leaking data in shared pages This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.322 by commit...

GSD-2022-1004876 xen/netfront: fix leaking data in shared pages

xen/netfront: fix leaking data in shared pages This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.287 by commit...

GSD-2022-1004875 xen/netfront: force data bouncing when backend is untrusted

xen/netfront: force data bouncing when backend is untrusted This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.287 by commit...

GSD-2022-1004810 xen/netfront: fix leaking data in shared pages

xen/netfront: fix leaking data in shared pages This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.251 by commit...

GSD-2022-1004809 xen/netfront: force data bouncing when backend is untrusted

xen/netfront: force data bouncing when backend is untrusted This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.251 by commit...

GSD-2022-1004721 xen/netfront: fix leaking data in shared pages

xen/netfront: fix leaking data in shared pages This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.204 by commit...

GSD-2022-1004720 xen/netfront: force data bouncing when backend is untrusted

xen/netfront: force data bouncing when backend is untrusted This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.204 by commit...

GSD-2022-1004599 xen/netfront: fix leaking data in shared pages

xen/netfront: fix leaking data in shared pages This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.129 by commit...

GSD-2022-1004598 xen-netfront: restore __skb_queue_tail() positioning in xennet_get_responses()

xen-netfront: restore skbqueuetail positioning in xennetgetresponses This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.129 by commit...

GSD-2022-1004597 xen/netfront: force data bouncing when backend is untrusted

xen/netfront: force data bouncing when backend is untrusted This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.129 by commit...

GSD-2022-1004433 xen/netfront: force data bouncing when backend is untrusted

xen/netfront: force data bouncing when backend is untrusted This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.53 by commit...

GSD-2022-1004432 xen/netfront: fix leaking data in shared pages

xen/netfront: fix leaking data in shared pages This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.53 by commit...