CVE-2022-26357

🗓️ 05 Apr 2022 00:00:00Reported by XENType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 124 Views

race in VT-d domain ID cleanup Xen domain IDs are up to 15 bits wide. VT-d hardware may allow for only less than 15 bits to hold a domain ID associating a physical device with a particular domain. Therefore internally Xen domain IDs are mapped to the smaller value range. The cleaning up of the housekeeping structures has a race, allowing for VT-d domain IDs to be leaked and flushes to be bypassed

Reporter	Title	Published	Views	Family All 61
ATTACKERKB	CVE-2022-26357	5 Apr 202213:15	–	attackerkb
AlpineLinux	CVE-2022-26357	5 Apr 202213:15	–	alpinelinux
Circl	CVE-2022-26357	5 Apr 202216:28	–	circl
CNNVD	Xen 竞争条件问题漏洞	5 Apr 202200:00	–	cnnvd
Citrix	Citrix Hypervisor Security Update	5 Apr 202210:50	–	citrix
Cvelist	CVE-2022-26357	5 Apr 202200:00	–	cvelist
Debian	[SECURITY] [DSA 5117-1] xen security update	10 Apr 202218:07	–	debian
Debian CVE	CVE-2022-26357	5 Apr 202200:00	–	debiancve
Fedora	[SECURITY] Fedora 35 Update: xen-4.15.2-3.fc35	21 Apr 202221:22	–	fedora
Fedora	[SECURITY] Fedora 36 Update: xen-4.16.1-1.fc36	7 May 202205:01	–	fedora

NVD

Node

xen xenRange4.11.0–4.12.0

xen xenRange4.13.0–4.16.0

Node

debian debian_linuxMatch11.0

Node

fedoraproject fedoraMatch34

fedoraproject fedoraMatch35

[
  {
    "vendor": "Xen",
    "product": "xen",
    "versions": [
      {
        "version": "consult Xen advisory XSA-399",
        "status": "unknown"
      }
    ]
  }
]

Source	Link
xenbits	www.xenbits.xen.org/xsa/advisory-399.html
openwall	www.openwall.com/lists/oss-security/2022/04/05/2
security	www.security.gentoo.org/glsa/202402-07
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UHFSRVLM2JUCPDC2KGB7ETPQYJLCGBLD/
xenbits	www.xenbits.xenproject.org/xsa/advisory-399.txt
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6ETPM2OVZZ6KOS2L7QO7SIW6XWT5OW3F/
debian	www.debian.org/security/2022/dsa-5117

21 Nov 2024 06:53Current

6.9Medium risk

Vulners AI Score6.9

CVSS 26.2

CVSS 3.17

EPSS0.00018

CWE-362