CVE-2022-49689

...

CVE-2022-49689

The CVE entry for CVE-2022-49689 is complemented by concrete details in connected documents. The Linux kernel’s xen-blkfront component is affected by a NULL pointer dereference when a VBD is not fully created and then closed, potentially triggering a kernel panic. The root cause involves NULL var...

CVE-2021-47573

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

kernel: Fix of 10 CVEs

openvswitch: fix OOB access in reservesfasize CVE-2022-2639 - xen/blkfront: fix leaking data in shared pages CVE-2022-26365 - Bluetooth: Fix slab-out-of-bounds read in hciextendedinquiryresultevt CVE-2020-36386 - btrfs: only search for leftinfo if there is no rightinfo in trymergefreespace...

GSD-2022-1004596 xen/blkfront: force data bouncing when backend is untrusted

xen/blkfront: force data bouncing when backend is untrusted This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.129 by commit...

GSD-2022-1004467 xen-blkfront: Handle NULL gendisk

xen-blkfront: Handle NULL gendisk This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.51 by commit ffa12a326415dfe5fc21e66d9d2b86896b4c9eaf, i...

GSD-2022-1004430 xen/blkfront: force data bouncing when backend is untrusted

xen/blkfront: force data bouncing when backend is untrusted This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.53 by commit...

GSD-2022-1004262 xen-blkfront: Handle NULL gendisk

xen-blkfront: Handle NULL gendisk This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.8 by commit db403bc872af09360f5c80f83dc3b360f0be49af, it...

PT-2022-33139

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.287 Description The issue is related to leaking data in shared pages, specifically in the xen/blkfront component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linu...

PT-2022-32862

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.129 Description The issue is related to leaking data in shared pages, specifically in the xen/blkfront component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linu...

PT-2022-32479

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.10 Description The issue is related to the xen/blkfront component, where data bouncing is not forced when the backend is untrusted. This is an automated ID intended to aid in discovery of potential security...

PT-2022-33187

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.322 Description The issue is related to the xen/blkfront component, where data bouncing is not forced when the backend is untrusted. This is an automated ID intended to aid in discovery of potential security...

PT-2022-32692

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.53 Description The issue is related to the xen/blkfront component, where data bouncing is not forced when the backend is untrusted. This is an automated ID intended to aid in discovery of potential security...

PT-2022-32984

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.204 Description The issue is related to leaking data in shared pages in the xen/blkfront component. The actual impact and attack plausibility have not yet been proven. Recommendations For versions prior to...

PT-2022-32981

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.204 Description The issue is related to the xen/blkfront component, where data bouncing is not forced when the backend is untrusted. This is an automated ID intended to aid in discovery of potential security...

PT-2022-32858

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.129 Description The issue is related to the xen/blkfront component, where data bouncing is not forced when the backend is untrusted. This is an automated ID intended to aid in discovery of potential securit...

PT-2022-32524

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.8 Description The issue is related to the xen-blkfront component, specifically handling a NULL gendisk. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-32729

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.51 Description The issue is related to the xen-blkfront component in the Linux Kernel, specifically handling a NULL gendisk. The actual impact and attack plausibility have not yet been proven. Recommendatio...

PT-2022-32696

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.53 Description The issue is related to leaking data in shared pages, specifically in the xen/blkfront component. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

PT-2022-33134

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.287 Description The issue is related to the xen/blkfront component, where data bouncing is not forced when the backend is untrusted. This is an automated ID intended to aid in discovery of potential securit...