CVE-2022-26362

🗓️ 09 Jun 2022 12:50:19Reported by XENType

Race condition in typeref acquisition Xen maintains a type reference count for pages, in addition to a regular reference count. Unfortunately, the logic for acquiring a type reference has a race condition, whereby a safely TLB flush is issued too early and creates a window where the guest can re-establish the read/write mapping before writeability is prohibited.

Reporter	Title	Published	Views	Family All 86
ATTACKERKB	CVE-2022-26362	9 Jun 202217:15	–	attackerkb
BDU FSTEC	The vulnerability of Xen hypervisors arises from synchronization errors when using shared resources, allowing a perpetrator to execute arbitrary code.	6 Jul 202200:00	–	bdu_fstec
Circl	CVE-2022-26362	9 Jun 202220:33	–	circl
CNNVD	Xen 竞争条件问题漏洞	9 Jun 202200:00	–	cnnvd
Citrix	Citrix Hypervisor Security Update	23 Jun 202220:06	–	citrix
CVE	CVE-2022-26362	9 Jun 202212:50	–	cve
Debian	[SECURITY] [DSA 5184-1] xen security update	15 Jul 202218:05	–	debian
Debian CVE	CVE-2022-26362	9 Jun 202212:50	–	debiancve
Tenable Nessus	Debian DSA-5184-1 : xen - security update	16 Jul 202200:00	–	nessus
Tenable Nessus	GLSA-202208-23 : Xen: Multiple Vulnerabilities	15 Aug 202200:00	–	nessus

[
  {
    "product": "xen",
    "vendor": "Xen",
    "versions": [
      {
        "status": "unknown",
        "version": "consult Xen advisory XSA-401"
      }
    ]
  }
]

Source	Link
security	www.security.gentoo.org/glsa/202208-23
xenbits	www.xenbits.xenproject.org/xsa/advisory-401.txt
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OH65U6FTTB5MLH5A6Q3TW7KVCGOG4MYI/
lists	www.lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RKRXZ4LHGCGMOG24ZCEJNY6R2BTS4S2Q/
openwall	www.openwall.com/lists/oss-security/2022/06/09/3
xenbits	www.xenbits.xen.org/xsa/advisory-401.html
debian	www.debian.org/security/2022/dsa-5184
packetstormsecurity	www.packetstormsecurity.com/files/167718/Xen-TLB-Flush-Bypass.html

14 Aug 2022 20:11Current

7High risk

Vulners AI Score7

EPSS0.00379