Vulnerability Name:

CVE-2021-28715 (CCN-215725)

Assigned:2021-12-20
Published:2021-12-20
Updated:2022-05-13
Summary:Guest can force Linux netback driver to hog large amounts of kernel memory T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Incoming data packets for a guest in the Linux kernel's netback driver are buffered until the guest is ready to process them. There are some measures taken for avoiding to pile up too much data, but those can be bypassed by the guest: There is a timeout how long the client side of an interface can stop consuming new packets before it is assumed to have stalled, but this timeout is rather long (60 seconds by default). Using a UDP connection on a fast interface can easily accumulate gigabytes of data in that time. (CVE-2021-28715) The timeout could even never trigger if the guest manages to have only one free slot in its RX queue ring page and the next package would require more than one free slot, which may be the case when using GSO, XDP, or software hashing. (CVE-2021-28714)
CVSS v3 Severity:6.5 Medium (CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)
5.7 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Local
Attack Complexity (AC): Low
Privileges Required (PR): Low
User Interaction (UI): None
Scope:Scope (S): Changed
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): High
6.2 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
5.4 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:U/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Local
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): High
CVSS v2 Severity:2.1 Low (CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): Low
Authentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Partial
4.9 Medium (CCN CVSS v2 Vector: AV:L/AC:L/Au:N/C:N/I:N/A:C)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): Low
Athentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): None
Availibility (A): Complete
Vulnerability Type:CWE-404
Vulnerability Consequences:Denial of Service
References:Source: MITRE
Type: CNA
CVE-2021-28715

Source: CCN
Type: Xen Security Advisory XSA-392
Guest can force Linux netback driver to hog large amounts of kernel memory

Source: XF
Type: UNKNOWN
xen-cve202128715-dos(215725)

Source: MLIST
Type: Mailing List, Third Party Advisory
[debian-lts-announce] 20220309 [SECURITY] [DLA 2940-1] linux security update

Source: MLIST
Type: Mailing List, Third Party Advisory
[debian-lts-announce] 20220309 [SECURITY] [DLA 2941-1] linux-4.19 security update

Source: DEBIAN
Type: Third Party Advisory
DSA-5050

Source: DEBIAN
Type: Third Party Advisory
DSA-5096

Source: MISC
Type: Vendor Advisory
https://xenbits.xenproject.org/xsa/advisory-392.txt

Vulnerable Configuration:Configuration 1:
  • cpe:/o:linux:linux_kernel:*:*:*:*:*:*:*:* (Version < 5.15.0)

    • Configuration 2:
  • cpe:/o:debian:debian_linux:9.0:*:*:*:*:*:*:*
  • OR cpe:/o:debian:debian_linux:10.0:*:*:*:*:*:*:*
  • OR cpe:/o:debian:debian_linux:11.0:*:*:*:*:*:*:*

    • Configuration CCN 1:
  • cpe:/a:xensource:xen:*:*:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    Oval Definitions
    Definition IDClassTitleLast Modified
    oval:org.opensuse.security:def:8029
    P
    		kernel-docs-5.14.21-150500.53.2 on GA media (Moderate)
    2023-06-20
    oval:org.opensuse.security:def:8090
    P
    		reiserfs-kmp-default-5.14.21-150500.53.2 on GA media (Moderate)
    2023-06-12
    oval:org.opensuse.security:def:7539
    P
    		kernel-64kb-5.14.21-150500.53.2 on GA media (Moderate)
    2023-06-12
    oval:org.opensuse.security:def:7593
    P
    		libgstphotography-1_0-0-1.22.0-150500.1.3 on GA media (Moderate)
    2023-06-12
    oval:org.opensuse.security:def:7720
    P
    		mozilla-nspr-32bit-4.34.1-150000.3.26.1 on GA media (Moderate)
    2023-06-12
    oval:org.opensuse.security:def:3567
    P
    		libXtst6-1.2.2-7.1 on GA media (Moderate)
    2022-06-28
    oval:org.opensuse.security:def:3398
    P
    		wpa_supplicant-2.6-15.10.1 on GA media (Moderate)
    2022-06-28
    oval:org.opensuse.security:def:3448
    P
    		busybox-1.21.1-3.3 on GA media (Moderate)
    2022-06-28
    oval:org.opensuse.security:def:3453
    P
    		clamav-0.101.3-1.19 on GA media (Moderate)
    2022-06-28
    oval:org.opensuse.security:def:3743
    P
    		perl-32bit-5.18.2-12.20.1 on GA media (Moderate)
    2022-06-28
    oval:org.opensuse.security:def:95078
    P
    		reiserfs-kmp-default-5.14.21-150400.22.1 on GA media (Moderate)
    2022-06-22
    oval:org.opensuse.security:def:95083
    P
    		kernel-azure-5.14.21-150400.12.1 on GA media (Moderate)
    2022-06-22
    oval:org.opensuse.security:def:94590
    P
    		kernel-64kb-5.14.21-150400.22.1 on GA media (Moderate)
    2022-06-22
    oval:org.opensuse.security:def:95197
    P
    		kernel-default-extra-5.14.21-150400.22.1 on GA media (Moderate)
    2022-06-22
    oval:org.opensuse.security:def:95028
    P
    		kernel-docs-5.14.21-150400.22.1 on GA media (Moderate)
    2022-06-22
    oval:org.opensuse.security:def:2960
    P
    		kernel-64kb-5.14.21-150400.22.1 on GA media (Moderate)
    2022-06-22
    oval:org.opensuse.security:def:4601
    P
    		Security update for the Linux Kernel (Live Patch 19 for SLE 12 SP5) (Important)
    2022-05-10
    oval:org.opensuse.security:def:125120
    P
    		Security update for the Linux Kernel (Important)
    2022-02-11
    oval:org.opensuse.security:def:127358
    P
    		Security update for the Linux Kernel (Important)
    2022-02-11
    oval:org.opensuse.security:def:125394
    P
    		Security update for the Linux Kernel (Important)
    2022-02-11
    oval:org.opensuse.security:def:125797
    P
    		Security update for the Linux Kernel (Important)
    2022-02-11
    oval:org.opensuse.security:def:126960
    P
    		Security update for the Linux Kernel (Important)
    2022-02-11
    oval:org.opensuse.security:def:118920
    P
    		Security update for the Linux Kernel (Important)
    2022-01-26
    oval:org.opensuse.security:def:119225
    P
    		Security update for the Linux Kernel (Important)
    2022-01-26
    oval:org.opensuse.security:def:118646
    P
    		Security update for the Linux Kernel (Important)
    2022-01-26
    oval:org.opensuse.security:def:119415
    P
    		Security update for the Linux Kernel (Important)
    2022-01-26
    oval:org.opensuse.security:def:42189
    P
    		Security update for the Linux Kernel (Important)
    2022-01-26
    oval:org.opensuse.security:def:118730
    P
    		Security update for the Linux Kernel (Important)
    2022-01-26
    oval:org.opensuse.security:def:119600
    P
    		Security update for the Linux Kernel (Important)
    2022-01-26
    oval:org.opensuse.security:def:118182
    P
    		Security update for the Linux Kernel (Important)
    2022-01-26
    oval:org.opensuse.security:def:118438
    P
    		Security update for the Linux Kernel (Important)
    2022-01-25
    oval:org.opensuse.security:def:42186
    P
    		Security update for the Linux Kernel (Important)
    2022-01-25
    oval:org.opensuse.security:def:1159
    P
    		Security update for the Linux Kernel (Important)
    2022-01-19
    oval:org.opensuse.security:def:101892
    P
    		Security update for the Linux Kernel (Important)
    2022-01-19
    oval:org.opensuse.security:def:99472
    P
    		 (Important)
    2022-01-19
    oval:org.opensuse.security:def:102306
    P
    		Security update for the Linux Kernel (Important)
    2022-01-19
    oval:org.opensuse.security:def:100734
    P
    		 (Important)
    2022-01-19
    oval:org.opensuse.security:def:1232
    P
    		Security update for the Linux Kernel (Important)
    2022-01-19
    oval:org.opensuse.security:def:101969
    P
    		Security update for the Linux Kernel (Important)
    2022-01-19
    oval:org.opensuse.security:def:99734
    P
    		 (Important)
    2022-01-19
    oval:org.opensuse.security:def:1748
    P
    		Security update for the Linux Kernel (Important)
    2022-01-19
    oval:org.opensuse.security:def:102351
    P
    		Security update for the Linux Kernel (Important)
    2022-01-19
    oval:org.opensuse.security:def:101590
    P
    		Security update for the Linux Kernel (Important)
    2022-01-19
    oval:org.opensuse.security:def:1316
    P
    		Security update for the Linux Kernel (Important)
    2022-01-19
    oval:org.opensuse.security:def:100062
    P
    		 (Important)
    2022-01-19
    oval:org.opensuse.security:def:1799
    P
    		Security update for the Linux Kernel (Important)
    2022-01-19
    oval:org.opensuse.security:def:859
    P
    		Security update for the Linux Kernel (Important)
    2022-01-19
    oval:org.opensuse.security:def:101837
    P
    		Security update for the Linux Kernel (Important)
    2022-01-19
    oval:org.opensuse.security:def:99198
    P
    		 (Important)
    2022-01-19
    oval:org.opensuse.security:def:100400
    P
    		 (Important)
    2022-01-19
    oval:org.opensuse.security:def:42268
    P
    		Security update for the Linux Kernel (Important)
    2022-01-19
    oval:org.opensuse.security:def:21845
    P
    		Security update for the Linux Kernel (Important)
    2022-01-17
    oval:org.opensuse.security:def:4742
    P
    		Security update for the Linux Kernel (Important)
    2022-01-17
    oval:org.opensuse.security:def:87575
    P
    		Security update for the Linux Kernel (Important) (in QA)
    2022-01-17
    oval:org.opensuse.security:def:33111
    P
    		Security update for the Linux Kernel (Important) (in QA)
    2022-01-17
    oval:org.opensuse.security:def:58934
    P
    		Security update for the Linux Kernel (Important) (in QA)
    2022-01-17
    oval:org.opensuse.security:def:1602
    P
    		Security update for the Linux Kernel (Important)
    2022-01-14
    oval:org.opensuse.security:def:42355
    P
    		Security update for the Linux Kernel (Important)
    2022-01-14
    oval:org.opensuse.security:def:6188
    P
    		Security update for the Linux Kernel (Important)
    2022-01-14
    oval:org.opensuse.security:def:34682
    P
    		Security update for the Linux Kernel (Important)
    2022-01-14
    oval:org.opensuse.security:def:60505
    P
    		Security update for the Linux Kernel (Important)
    2022-01-14
    oval:org.opensuse.security:def:102159
    P
    		Security update for the Linux Kernel (Important)
    2022-01-14
    oval:org.opensuse.security:def:68809
    P
    		Security update for the Linux Kernel (Important)
    2022-01-14
    oval:org.opensuse.security:def:6177
    P
    		Security update for the Linux Kernel (Important)
    2022-01-13
    oval:org.opensuse.security:def:34681
    P
    		Security update for the Linux Kernel (Important)
    2022-01-13
    oval:org.opensuse.security:def:60504
    P
    		Security update for the Linux Kernel (Important)
    2022-01-13
    oval:org.opensuse.security:def:4701
    P
    		Security update for the Linux Kernel (Important)
    2022-01-13
    oval:org.opensuse.security:def:26227
    P
    		Security update for the Linux Kernel (Important)
    2022-01-13
    oval:org.opensuse.security:def:6359
    P
    		Security update for the Linux Kernel (Important)
    2022-01-13
    oval:org.opensuse.security:def:35294
    P
    		Security update for the Linux Kernel (Important)
    2022-01-13
    oval:org.opensuse.security:def:19626
    P
    		Security update for the Linux Kernel (Important)
    2022-01-13
    oval:org.opensuse.security:def:61117
    P
    		Security update for the Linux Kernel (Important)
    2022-01-13
    oval:org.opensuse.security:def:5357
    P
    		Security update for the Linux Kernel (Important)
    2022-01-13
    oval:org.opensuse.security:def:4305
    P
    		Security update for the Linux Kernel (Important)
    2022-01-13
    oval:org.opensuse.security:def:20589
    P
    		Security update for the Linux Kernel (Important)
    2022-01-13
    oval:org.opensuse.security:def:111873
    P
    		Security update for the Linux Kernel (Important)
    2022-01-11
    oval:org.opensuse.security:def:76456
    P
    		Security update for the Linux Kernel (Important)
    2022-01-11
    oval:org.opensuse.security:def:102125
    P
    		Security update for the Linux Kernel (Important)
    2022-01-11
    oval:org.opensuse.security:def:68682
    P
    		Security update for the Linux Kernel (Important)
    2022-01-11
    oval:org.opensuse.security:def:6299
    P
    		Security update for the Linux Kernel (Important)
    2022-01-11
    oval:org.opensuse.security:def:67388
    P
    		Security update for the Linux Kernel (Important)
    2022-01-11
    oval:org.opensuse.security:def:1564
    P
    		Security update for the Linux Kernel (Important)
    2022-01-11
    oval:org.opensuse.security:def:74758
    P
    		Security update for the Linux Kernel (Important) (in QA)
    2022-01-07
    oval:org.opensuse.security:def:6491
    P
    		Security update for the Linux Kernel (Important) (in QA)
    2022-01-07
    oval:org.opensuse.security:def:111858
    P
    		Security update for the Linux Kernel (Important) (in QA)
    2022-01-07
    oval:org.opensuse.security:def:67580
    P
    		Security update for the Linux Kernel (Important) (in QA)
    2022-01-07
    oval:org.opensuse.security:def:8402
    P
    		Security update for the Linux Kernel (Important) (in QA)
    2022-01-07
    oval:org.opensuse.security:def:70850
    P
    		Security update for the Linux Kernel (Important) (in QA)
    2022-01-07
    oval:org.opensuse.security:def:65690
    P
    		Security update for the Linux Kernel (Important) (in QA)
    2022-01-07
    oval:org.opensuse.security:def:76445
    P
    		Security update for the Linux Kernel (Important) (in QA)
    2022-01-07
    oval:org.opensuse.security:def:7298
    P
    		Security update for the Linux Kernel (Important) (in QA)
    2022-01-07
    oval:org.opensuse.security:def:68387
    P
    		Security update for the Linux Kernel (Important) (in QA)
    2022-01-07
    oval:org.opensuse.security:def:10710
    P
    		Security update for the Linux Kernel (Important) (in QA)
    2022-01-07
    oval:org.opensuse.security:def:6288
    P
    		Security update for the Linux Kernel (Important) (in QA)
    2022-01-07
    oval:org.opensuse.security:def:67377
    P
    		Security update for the Linux Kernel (Important) (in QA)
    2022-01-07
    oval:org.opensuse.security:def:73954
    P
    		Security update for the Linux Kernel (Important) (in QA)
    2022-01-07
    oval:org.opensuse.security:def:64832
    P
    		Security update for the Linux Kernel (Important) (in QA)
    2022-01-07
    BACK
    linux linux kernel *
    debian debian linux 9.0
    debian debian linux 10.0
    debian debian linux 11.0
    xensource xen *