VDB
GCVE-VVD-MAGEIA-2021-589
GCVE-VVD-MAGEIA-2021-589
Advisory Published
This kernel-linus update is based on upstream 5.15.11 and fixes at least the
following security issues:
netdevsim: Zero-initialize memory for new map's value in function
nsim_bpf_map_alloc (CVE-2021-4135).
Potentially malicious XEN PV backends can cause guest DoS due to unhardened
frontends in the guests, even though this ought to have been prevented by
containing them within a driver domain. This update fixes the issue tracked
as XSA-391: blkfront (CVE-2021-28711), netfront (CVE-2021-28712),
hvc_xen (CVE-2021-28713).
The Linux kernel's xen-netback backend driver can be forced by guests to
queue arbitrary amounts of network data, finally causing an out of memory
situation in the domain the backend is running in (usually dom0). This
update fixes the issues tracked as XSA-392 (CVE-2021-28714, CVE-2021-28715).
rds: memory leak in __rds_conn_create() (CVE-2021-45480).
For other upstream fixes, see the referenced changelogs.
Affected Products
| Vendor | Product | Versions | Platforms |
|---|---|---|---|
| Mageia | kernel-linus | 0 (affected), 5.15.11-1.mga8 (unaffected) | — |
References
Browse GCVE Records
100 records in the GCVE database · Updated April 16, 2026
No matching records found.
Explore Further
Investigate this vulnerability in the interactive console or download the raw GCVE record.