829715 – linux kernel: multiple vulnerabilities in Xen

Bug 829715 - linux kernel: multiple vulnerabilities in Xen

Summary: linux kernel: multiple vulnerabilities in Xen

Status:	RESOLVED FIXED

Alias:	None

Product:	Gentoo Security
Classification:	Unclassified
Component:	Vulnerabilities (show other bugs)
Hardware:	All Linux

Importance:	Normal normal (vote)
Assignee:	Gentoo Security

URL:
Whiteboard:
Keywords:

Depends on:	829914 829915
Blocks:
	Show dependency tree

Reported:	2021-12-20 14:46 UTC by Tomáš Mózes
Modified:	2022-03-28 18:01 UTC (History)
CC List:	2 users (show)

See Also:	CVE-2021-39685
Package list:
Runtime testing required:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Tomáš Mózes 2021-12-20 14:46:27 UTC

https://xenbits.xen.org/xsa/advisory-391.html
https://xenbits.xen.org/xsa/advisory-392.html

Patches already in queue, for example: https://git.kernel.org/pub/scm/linux/kernel/git/stable/stable-queue.git/tree/queue-5.4

Probably comes with next kernel release.

Comment 1 Tomáš Mózes 2021-12-21 05:25:31 UTC

Should be released 22.12.2021 according to https://www.spinics.net/lists/stable/msg521917.html

Comment 2 Tomáš Mózes 2021-12-22 15:26:45 UTC

It's out https://cdn.kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.4.168, please bump.

Comment 3 Tomáš Mózes 2021-12-22 15:28:37 UTC

In tree https://github.com/gentoo/gentoo/commit/fba01ade42ed8863776b29a96a541869c41ced66, stabilize?

Comment 4 Michał Górny archtester

2021-12-24 08:31:45 UTC

Thanks for the report!

Comment 5 Mike Pagano gentoo-dev

2022-03-28 15:45:18 UTC

Affected gentoo-sources kernels are removed, newer ones are stabilized

Comment 6 John Helmert III archtester

2022-03-28 18:01:33 UTC

All done per kernel@!