CVEvulnerability

CVE-2022-26357

7.0 HIGH Published 2022-04-05 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-04-05
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.0 HIGH — CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
6.2 MEDIUM — AV:L/AC:H/Au:N/C:C/I:C/A:C
Weaknesses
CWE-362

Description

race in VT-d domain ID cleanup Xen domain IDs are up to 15 bits wide. VT-d hardware may allow for only less than 15 bits to hold a domain ID associating a physical device with a particular domain. Therefore internally Xen domain IDs are mapped to the smaller value range. The cleaning up of the housekeeping structures has a race, allowing for VT-d domain IDs to be leaked and flushes to be bypassed.

Affected configurations

• xen xen (>= 4.11.0 < 4.12.0) • xen xen (>= 4.13.0 < 4.16.0) • debian debian linux 11.0 • fedoraproject fedora 34 • fedoraproject fedora 35

Related

Weakness · CWE (1)

  • CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization weakness

References