Products
Linux kernel (Xen netfront driver)
Source
416baaa9-dc9f-4396-8d5f-8c081fb06d67
Tags
CVE-2021-47574 details
Last Modified : June 19, 2024, 3:15 p.m.
Description
In the Linux kernel, the following vulnerability has been resolved: xen/netfront: harden netfront against event channel storms The Xen netfront driver is still vulnerable for an attack via excessive number of events sent by the backend. Fix that by using lateeoi event channels. For being able to detect the case of no rx responses being added while the carrier is down a new lock is needed in order to update and test rsp_cons and the number of seen unconsumed responses atomically. This is part of XSA-391 --- V2: - don't eoi irq in case of interface set broken (Jan Beulich) - handle carrier off + no new responses added (Jan Beulich) V3: - add rx_ prefix to rsp_unconsumed (Jan Beulich) - correct xennet_set_rx_rsp_cons() spelling (Jan Beulich)
CVSS Score
1 | 2 | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 |
---|
Weakness
Weakness | Name | Description |
---|
References
URL | Source |
---|---|
https://git.kernel.org/stable/c/3559ca594f15fcd23ed10c0056d40d71e5dab8e5 | 416baaa9-dc9f-4396-8d5f-8c081fb06d67 |
https://git.kernel.org/stable/c/3e68d099f09c260a7dee28b99af02fe6977a9e66 | 416baaa9-dc9f-4396-8d5f-8c081fb06d67 |
https://git.kernel.org/stable/c/4bf81386e3d6e5083c93d51eff70260bcec091bb | 416baaa9-dc9f-4396-8d5f-8c081fb06d67 |
https://git.kernel.org/stable/c/81900aa7d7a130dec4c55b68875e30fb8c9effec | 416baaa9-dc9f-4396-8d5f-8c081fb06d67 |
https://git.kernel.org/stable/c/99120c8230fdd5e8b72a6e4162db9e1c0a61954a | 416baaa9-dc9f-4396-8d5f-8c081fb06d67 |
https://git.kernel.org/stable/c/a29c8b5226eda52e6d6ff151d9343558ea3ad451 | 416baaa9-dc9f-4396-8d5f-8c081fb06d67 |
https://git.kernel.org/stable/c/b27d47950e481f292c0a5ad57357edb9d95d03ba | 416baaa9-dc9f-4396-8d5f-8c081fb06d67 |
https://git.kernel.org/stable/c/d31b3379179d64724d3bbfa87bd4ada94e3237de | 416baaa9-dc9f-4396-8d5f-8c081fb06d67 |