CVE-2022-26357
HIGHXen 4.11.0-4.11.99 - Race Condition in VT-d Domain ID Cleanup
Title source: llmDescription
race in VT-d domain ID cleanup Xen domain IDs are up to 15 bits wide. VT-d hardware may allow for only less than 15 bits to hold a domain ID associating a physical device with a particular domain. Therefore internally Xen domain IDs are mapped to the smaller value range. The cleaning up of the housekeeping structures has a race, allowing for VT-d domain IDs to be leaked and flushes to be bypassed.
References (7)
Core 7
Core References
Mailing List, Patch, Third Party Advisory mailing-list
http://www.openwall.com/lists/oss-security/2022/04/05/2
Third Party Advisory vendor-advisory
https://www.debian.org/security/2022/dsa-5117
Mailing List, Third Party Advisory vendor-advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UHFSRVLM2JUCPDC2KGB7ETPQYJLCGBLD/
Mailing List, Third Party Advisory vendor-advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6ETPM2OVZZ6KOS2L7QO7SIW6XWT5OW3F/
Third Party Advisory vendor-advisory
https://security.gentoo.org/glsa/202402-07
Patch, Vendor Advisory
http://xenbits.xen.org/xsa/advisory-399.html
Vendor Advisory
https://xenbits.xenproject.org/xsa/advisory-399.txt
Scores
CVSS v3
7.0
EPSS
0.0002
EPSS Percentile
4.9%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-362
Status
published
Products (4)
debian/debian_linux
11.0
fedoraproject/fedora
34
fedoraproject/fedora
35
xen/xen
4.11.0 - 4.12.0
Published
Apr 05, 2022
Tracked Since
Feb 18, 2026