Linux PV device frontends vulnerable to attacks by backends

[Luís Infante da Câmara]

The packages listed above are vulnerable to the CVEs below in at least one Ubuntu release, as stated in the Ubuntu CVE Tracker, except for linux-azure-4.15, linux-dell300x, linux-gcp-4.15 and linux-snapdragon, that are only vulnerable to CVE-2022-23041.

Please release fixed packages.

Xen released a security advisory on March 10.

(I was informed by the security team that it does not track security issues via Launchpad bugs, but in the Ubuntu CVE Tracker. However, the issue is unpatched for over 2.5 months and marked as needed for these combinations of source package and Ubuntu version in the Tracker, and therefore I am filing this bug.)

[Timo Aaltonen (tjaalton)]

oem-5.14 will be eol soon

[Ubuntu Kernel Bot (ubuntu-kernel-bot)]

This bug is missing log files that will aid in diagnosing the problem. While running an Ubuntu kernel (not a mainline or third-party kernel) please enter the following command in a terminal window:

apport-collect 1976184

and then change the status of the bug to 'Confirmed'.

If, due to the nature of the issue you have encountered, you are unable to run this command, please add a comment stating that fact and change the bug status to 'Confirmed'.

This change has been made by an automated script, maintained by the Ubuntu Kernel Team.

[Luís Infante da Câmara (luis220413)]

I am using this bug to track 7 security vulnerabilities in Ubuntu kernels.

[Steve Beattie (sbeattie)]

All of these CVEs related to https://xenbits.xen.org/xsa/advisory-396.html have been addressed in every kernel except for

- Ubuntu 20.04's linux-oem-5.14
- CVE-2022-23041 has not been addressed in the 4.15 based kernels.