Logo
›
›vulnerability›CVE-2022-26357
Name
CVE-2022-26357
Source
NVD ( link)Debian ( link)
Description
race in VT-d domain ID cleanup Xen domain IDs are up to 15 bits wide. VT-d hardware may allow for only less than 15 bits to hold a domain ID associating a physical device with a particular domain. Therefore internally Xen domain IDs are mapped to the smaller value range. The cleaning up of the housekeeping structures has a race, allowing for VT-d domain IDs to be leaked and flushes to be bypassed.
CWEs
CWE-362
Published Date
Updated Date
Workaround
-
Advisories
http://www.openwall.com/lists/oss-security/2022/04/05/2Mailing List
http://xenbits.xen.org/xsa/advisory-399.htmlPatch
https://www.debian.org/security/2022/dsa-5117Third Party Advisory
https://xenbits.xenproject.org/xsa/advisory-399.txtVendor Advisory
http://www.openwall.com/lists/oss-security/2022/04/05/2Mailing List
http://xenbits.xen.org/xsa/advisory-399.htmlPatch
https://www.debian.org/security/2022/dsa-5117Third Party Advisory
https://xenbits.xenproject.org/xsa/advisory-399.txtVendor Advisory

Analysis#

Affected Component
Analysis
xen
Exploitable

Vulnerability Ratings#

7
CVSSv31
6.2
CVSSv2

Others affected component#

Name
Project
Project Version
Version
Status
xen
buildroot
master
4.19.5
Not Affected