{"id":"CVE-2022-26357","aliases":["ALPINE-CVE-2022-26357","DEBIAN-CVE-2022-26357","DSA-5117-1","EUVD-2022-30916","GHSA-p235-73wr-c3m7","SUSE-SU-2022:1285-1","SUSE-SU-2022:1300-1","SUSE-SU-2022:1359-1","SUSE-SU-2022:1375-1","SUSE-SU-2022:1408-1","SUSE-SU-2022:1505-1","SUSE-SU-2022:1506-1","SUSE-SU-2022:2158-1","UBUNTU-CVE-2022-26357","openSUSE-SU-2024:11979-1"],"status":"published","title":"race in VT-d domain ID cleanup Xen domain IDs are up to 15 bits wide. VT-d hardware may allow for...","description":"race in VT-d domain ID cleanup Xen domain IDs are up to 15 bits wide. VT-d hardware may allow for only less than 15 bits to hold a domain ID associating a physical device with a particular domain. Therefore internally Xen domain IDs are mapped to the smaller value range. The cleaning up of the housekeeping structures has a race, allowing for VT-d domain IDs to be leaked and flushes to be bypassed.","severity":{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.00258,"percentile":0.1759,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-362"],"published":"2022-04-05T00:00:00Z","modified":"2026-11-03T08:01:05Z","fixes":[{"ecosystem":"Alpine:v3.12","package":"xen","fixed_in":["4.13.4-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.13","package":"xen","fixed_in":["4.14.5-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.14","package":"xen","fixed_in":["4.15.2-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.15","package":"xen","fixed_in":["4.15.2-r2"],"sources":["osv"]},{"ecosystem":"Alpine:v3.16","package":"xen","fixed_in":["4.16.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.17","package":"xen","fixed_in":["4.16.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.18","package":"xen","fixed_in":["4.16.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.19","package":"xen","fixed_in":["4.16.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.20","package":"xen","fixed_in":["4.16.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.21","package":"xen","fixed_in":["4.16.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.22","package":"xen","fixed_in":["4.16.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"xen","fixed_in":["4.16.1-r0"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"xen","fixed_in":["4.16.1-r0"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"xen","fixed_in":["4.16.1-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"xen","fixed_in":["4.16.1-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"xen","fixed_in":["4.16.1-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.12","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.11.0"},{"fixed":"4.13.4-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.13","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.11.0"},{"fixed":"4.14.5-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.14","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.11.0"},{"fixed":"4.15.2-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.15","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.11.0"},{"fixed":"4.15.2-r2"}]}]},{"source":"osv","ecosystem":"Alpine:v3.16","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.11.0"},{"fixed":"4.16.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.17","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.11.0"},{"fixed":"4.16.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.18","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.11.0"},{"fixed":"4.16.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.19","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.11.0"},{"fixed":"4.16.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.20","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.11.0"},{"fixed":"4.16.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.21","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.11.0"},{"fixed":"4.16.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.22","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.11.0"},{"fixed":"4.16.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.11.0"},{"fixed":"4.16.1-r0"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"4.11.0"},{"fixed":"4.16.1-r0"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.16.1-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.16.1-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.16.1-1"}]}]},{"source":"osv","ecosystem":"Debian:11","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.4+74-gd7b22226b5-1"}]}],"versions":["4.14.2+25-gb6a8c4f72d-2","4.14.3+32-g9de3671772-1","4.14.3+32-g9de3671772-1~deb11u1","4.14.3-1","4.14.3-1~deb11u1"],"bundled":9},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 9","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.4_28-2.73.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 9","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.4_28-2.73.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.4_28-2.73.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4-LTSS","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.11.4_28-2.73.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.4_08-150200.3.50.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.4_08-150200.3.50.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP2","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.4_08-150200.3.50.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-BCL","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.4_08-150200.3.50.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP2-LTSS","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.4_08-150200.3.50.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP2","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.4_08-150200.3.50.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.1","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.4_08-150200.3.50.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.1","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.4_08-150200.3.50.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Manager Server 4.1","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.4_08-150200.3.50.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.0","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.4_08-150200.3.50.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.13.4_08-150200.3.50.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.4_34-150000.3.74.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.4_34-150000.3.74.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.10.4_34-150000.3.74.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.7.6_22-43.88.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:HPE Helion OpenStack 8","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.4_28-3.103.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 8","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.4_28-3.103.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud Crowbar 8","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.4_28-3.103.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.4_28-3.103.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-LTSS","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.4_28-3.103.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3-BCL","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.9.4_28-3.103.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.4_22-3.66.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.4_22-3.66.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.4_22-3.66.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP3","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.4_04-150300.3.24.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Server Applications 15 SP3","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.4_04-150300.3.24.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.4_04-150300.3.24.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.4_04-150300.3.24.1"}]}],"bundled":6},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.14.4_04-150300.3.24.1"}]}],"bundled":6},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.4_24-150100.3.72.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.4_24-150100.3.72.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.4_24-150100.3.72.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.4_24-150100.3.72.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.4_24-150100.3.72.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.12.4_24-150100.3.72.1"}]}],"bundled":9},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.5.1-0ubuntu1","4.5.1-0ubuntu2","4.6.0-1ubuntu1","4.6.0-1ubuntu2","4.6.0-1ubuntu4","4.6.0-1ubuntu4.1","4.6.0-1ubuntu4.2","4.6.0-1ubuntu4.3","4.6.5-0ubuntu1","4.6.5-0ubuntu1.1","4.6.5-0ubuntu1.2","4.6.5-0ubuntu1.4"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.9.0-0ubuntu3","4.9.0-0ubuntu4","4.9.2-0ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.9.2-0ubuntu2","4.9.2-0ubuntu6","4.9.2-0ubuntu7","4.11.3+24-g14b62ab3e5-1ubuntu1","4.11.3+24-g14b62ab3e5-1ubuntu2","4.11.3+24-g14b62ab3e5-1ubuntu2.2","4.11.3+24-g14b62ab3e5-1ubuntu2.3"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.11.4+24-gddaaccbbab-1ubuntu2","4.16.0-1~ubuntu2","4.16.0-1~ubuntu2.1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.17.2-1","4.17.2+55-g0b56bed864-1","4.17.2+76-ge1f9cb16e2-1","4.17.2+76-ge1f9cb16e2-1ubuntu1","4.17.3+10-g091466ba55-1","4.17.3+10-g091466ba55-1.1ubuntu2","4.17.3+10-g091466ba55-1.1ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.20.0-1ubuntu1","4.20.0+68-g35cb38b222-1"]},{"source":"osv","ecosystem":"Ubuntu:26.10","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.20.2+7-g1badcf5035-2build2","4.20.2+37-g61ff35323e-1ubuntu1","4.20.3+127-gc42374a105-1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["4.20.0+68-g35cb38b222-1","4.20.2+7-g1badcf5035-2","4.20.2+7-g1badcf5035-2build2"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"xen","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4.16.0_08-1.1"}]}],"bundled":4}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"xen","product":"xen"}],"references":[{"url":"https://xenbits.xenproject.org/xsa/advisory-399.txt","tags":["x_transferred","Vendor Advisory","advisory","report"]},{"url":"http://xenbits.xen.org/xsa/advisory-399.html","tags":["x_transferred","Patch","Vendor Advisory","fix","report"]},{"url":"http://www.openwall.com/lists/oss-security/2022/04/05/2","tags":["mailing-list","x_transferred","Mailing List","Patch","Third Party Advisory","fix","report"]},{"url":"https://www.debian.org/security/2022/dsa-5117","tags":["vendor-advisory","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UHFSRVLM2JUCPDC2KGB7ETPQYJLCGBLD/","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6ETPM2OVZZ6KOS2L7QO7SIW6XWT5OW3F/","tags":["vendor-advisory","x_transferred","web"]},{"url":"https://security.gentoo.org/glsa/202402-07","tags":["vendor-advisory","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-26357"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6ETPM2OVZZ6KOS2L7QO7SIW6XWT5OW3F/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UHFSRVLM2JUCPDC2KGB7ETPQYJLCGBLD/"},{"url":"https://github.com/advisories/GHSA-p235-73wr-c3m7"},{"url":"https://security.alpinelinux.org/vuln/CVE-2022-26357","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2022-26357","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20221285-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1196915","tags":["report"]},{"url":"https://bugzilla.suse.com/1197423","tags":["report"]},{"url":"https://bugzilla.suse.com/1197425","tags":["report"]},{"url":"https://bugzilla.suse.com/1197426","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-26401","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0001","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-0002","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-26356","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-26357","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-26358","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-26359","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-26360","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-26361","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20221300-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1194267","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20221359-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20221375-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1182846","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-20257","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20221408-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20221505-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20221506-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2022/suse-su-20222158-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1199965","tags":["report"]},{"url":"https://bugzilla.suse.com/1199966","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2022-26362","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-26363","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2022-26364","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2022-26357","tags":["report"]},{"url":"https://xenbits.xen.org/xsa/advisory-399.html","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-26357","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2022-26357","description":"race in VT-d domain ID cleanup Xen domain IDs are up to 15 bits wide. VT-d hardware may allow for only less than 15 bits to hold a domain ID associating a physical device with a particular domain. Therefore internally Xen domain IDs are mapped to the smaller value range. The cleaning up of the housekeeping structures has a race, allowing for VT-d domain IDs to be leaked and flushes to be bypassed.","status":"published","published":"2022-04-05T00:00:00Z","modified":"2024-08-03T05:03:32.803Z","updated_at":"2026-11-02T14:34:25.954329Z"}],"euvd":[{"id":"EUVD-2022-30916","description":"race in VT-d domain ID cleanup Xen domain IDs are up to 15 bits wide. VT-d hardware may allow for only less than 15 bits to hold a domain ID associating a physical device with a particular domain. Therefore internally Xen domain IDs are mapped to the smaller value range. The cleaning up of the housekeeping structures has a race, allowing for VT-d domain IDs to be leaked and flushes to be bypassed.","status":"published","published":"2022-04-05T00:00:00Z","modified":"2024-08-03T05:03:32Z","updated_at":"2026-11-03T03:25:45.346573Z"}],"ghsa":[{"id":"GHSA-p235-73wr-c3m7","title":"race in VT-d domain ID cleanup Xen domain IDs are up to 15 bits wide. VT-d hardware may allow for...","description":"race in VT-d domain ID cleanup Xen domain IDs are up to 15 bits wide. VT-d hardware may allow for only less than 15 bits to hold a domain ID associating a physical device with a particular domain. Therefore internally Xen domain IDs are mapped to the smaller value range. The cleaning up of the housekeeping structures has a race, allowing for VT-d domain IDs to be leaked and flushes to be bypassed.","status":"published","published":"2022-04-06T00:01:31Z","modified":"2024-02-04T09:30:31Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-362"],"updated_at":"2026-11-02T14:55:33.593991Z"}],"nvd":[{"id":"CVE-2022-26357","description":"race in VT-d domain ID cleanup Xen domain IDs are up to 15 bits wide. VT-d hardware may allow for only less than 15 bits to hold a domain ID associating a physical device with a particular domain. Therefore internally Xen domain IDs are mapped to the smaller value range. The cleaning up of the housekeeping structures has a race, allowing for VT-d domain IDs to be leaked and flushes to be bypassed.","status":"published","published":"2022-04-05T13:15:07.777Z","modified":"2026-06-17T04:35:02.807Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.2,"vector":"AV:L/AC:H/Au:N/C:C/I:C/A:C","level":"medium","assessor":"primary"}],"cwes":["CWE-362"],"updated_at":"2026-11-02T14:07:14.706146Z"}],"osv":[{"id":"ALPINE-CVE-2022-26357","description":"race in VT-d domain ID cleanup Xen domain IDs are up to 15 bits wide. VT-d hardware may allow for only less than 15 bits to hold a domain ID associating a physical device with a particular domain. Therefore internally Xen domain IDs are mapped to the smaller value range. The cleaning up of the housekeeping structures has a race, allowing for VT-d domain IDs to be leaked and flushes to be bypassed.","status":"published","published":"2022-04-05T13:15:07.777Z","modified":"2026-11-03T07:18:33.132975253Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T07:51:12.284675Z"},{"id":"CVE-2022-26357","description":"race in VT-d domain ID cleanup Xen domain IDs are up to 15 bits wide. VT-d hardware may allow for only less than 15 bits to hold a domain ID associating a physical device with a particular domain. Therefore internally Xen domain IDs are mapped to the smaller value range. The cleaning up of the housekeeping structures has a race, allowing for VT-d domain IDs to be leaked and flushes to be bypassed.","status":"published","published":"2022-04-05T13:15:07.777Z","modified":"2026-03-15T14:46:57.20204Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:24.758293Z"},{"id":"DEBIAN-CVE-2022-26357","description":"race in VT-d domain ID cleanup Xen domain IDs are up to 15 bits wide. VT-d hardware may allow for only less than 15 bits to hold a domain ID associating a physical device with a particular domain. Therefore internally Xen domain IDs are mapped to the smaller value range. The cleaning up of the housekeeping structures has a race, allowing for VT-d domain IDs to be leaked and flushes to be bypassed.","status":"published","published":"2022-04-05T13:15:07.777Z","modified":"2026-11-03T08:01:05.687794864Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T08:25:01.007408Z"},{"id":"UBUNTU-CVE-2022-26357","description":"race in VT-d domain ID cleanup Xen domain IDs are up to 15 bits wide. VT-d hardware may allow for only less than 15 bits to hold a domain ID associating a physical device with a particular domain. Therefore internally Xen domain IDs are mapped to the smaller value range. The cleaning up of the housekeeping structures has a race, allowing for VT-d domain IDs to be leaked and flushes to be bypassed.","status":"published","published":"2022-04-05T13:15:00Z","modified":"2026-10-17T12:56:21.322819391Z","cvss":[{"version":"3.1","score":7,"vector":"CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T16:53:53.13624Z"},{"id":"DSA-5117-1","title":"xen - security update","status":"published","published":"2022-04-10T00:00:00Z","modified":"2026-03-09T02:10:52.434161Z","updated_at":"2026-11-02T15:46:17.543497Z"},{"id":"openSUSE-SU-2024:11979-1","title":"xen-4.16.0_08-1.1 on GA media","description":"These are all security issues fixed in the xen-4.16.0_08-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:45:27.799985Z","updated_at":"2026-11-02T16:58:35.485255Z"},{"id":"SUSE-SU-2022:1285-1","title":"Security update for xen","description":"This update for xen fixes the following issues:\n\n- CVE-2022-26356: Fixed potential race conditions in dirty memory tracking that\n  could cause a denial of service in the host (bsc#1197423).\n- CVE-2022-26357: Fixed a potential race condition in memory cleanup for hosts\n  using VT-d IOMMU hardware, which could lead to a denial of service in the host\n  (bsc#1197425).\n- CVE-2022-26358,CVE-2022-26359,CVE-2022-26360,CVE-2022-26361: Fixed various memory\n  corruption issues for hosts using VT-d or AMD-Vi IOMMU hardware. These could be\n  leveraged by an attacker to cause a denial of service in the host (bsc#1197426).\n- CVE-2022-0001, CVE-2022-0002, CVE-2021-26401: Added BHB speculation issue\n  mitigations (bsc#1196915).\n","status":"published","published":"2022-04-20T13:56:38Z","modified":"2026-02-04T03:42:01.16221Z","updated_at":"2026-11-02T15:53:50.513981Z"},{"id":"SUSE-SU-2022:1300-1","title":"Security update for xen","description":"This update for xen fixes the following issues:\n\n- CVE-2022-26356: Fixed potential race conditions in dirty memory tracking that\n  could cause a denial of service in the host (bsc#1197423).\n- CVE-2022-26357: Fixed a potential race condition in memory cleanup for hosts\n  using VT-d IOMMU hardware, which could lead to a denial of service in the host\n  (bsc#1197425).\n- CVE-2022-26358,CVE-2022-26359,CVE-2022-26360,CVE-2022-26361: Fixed various memory\n  corruption issues for hosts using VT-d or AMD-Vi IOMMU hardware. These could be\n  leveraged by an attacker to cause a denial of service in the host (bsc#1197426).\n- CVE-2022-0001, CVE-2022-0002, CVE-2021-26401: Added BHB speculation issue\n  mitigations (bsc#1196915).\n","status":"published","published":"2022-04-22T06:39:52Z","modified":"2026-02-04T02:29:41.605167Z","updated_at":"2026-11-02T15:53:50.513981Z"},{"id":"SUSE-SU-2022:1359-1","title":"Security update for xen","description":"This update for xen fixes the following issues:\n\n- CVE-2022-26356: Fixed potential race conditions in dirty memory tracking that\n  could cause a denial of service in the host (bsc#1197423).\n- CVE-2022-26357: Fixed a potential race condition in memory cleanup for hosts\n  using VT-d IOMMU hardware, which could lead to a denial of service in the host\n  (bsc#1197425).\n- CVE-2022-26358,CVE-2022-26359,CVE-2022-26360,CVE-2022-26361: Fixed various memory\n  corruption issues for hosts using VT-d or AMD-Vi IOMMU hardware. These could be\n  leveraged by an attacker to cause a denial of service in the host (bsc#1197426).\n- CVE-2022-0001, CVE-2022-0002, CVE-2021-26401: Added BHB speculation issue\n  mitigations (bsc#1196915).\n","status":"published","published":"2022-04-25T11:26:19Z","modified":"2026-02-04T03:31:51.022238Z","updated_at":"2026-11-02T15:53:50.513981Z"},{"id":"SUSE-SU-2022:1375-1","title":"Security update for xen","description":"This update for xen fixes the following issues:\n\n- CVE-2022-26356: Fixed potential race conditions in dirty memory tracking that\n  could cause a denial of service in the host (bsc#1197423).\n- CVE-2022-26357: Fixed a potential race condition in memory cleanup for hosts\n  using VT-d IOMMU hardware, which could lead to a denial of service in the host\n  (bsc#1197425).\n- CVE-2022-26358,CVE-2022-26359,CVE-2022-26360,CVE-2022-26361: Fixed various memory\n  corruption issues for hosts using VT-d or AMD-Vi IOMMU hardware. These could be\n  leveraged by an attacker to cause a denial of service in the host (bsc#1197426).\n- CVE-2022-0001, CVE-2022-0002, CVE-2021-26401: Added BHB speculation issue\n  mitigations (bsc#1196915).\n- CVE-2021-20257: Fixed an infinite loop in the e1000 emulated device, which\n  could cause an excessive CPU consumption in the host (bsc#1182846).\n","status":"published","published":"2022-04-25T13:40:49Z","modified":"2026-02-04T04:19:13.528353Z","updated_at":"2026-11-02T15:53:50.513981Z"},{"id":"SUSE-SU-2022:1408-1","title":"Security update for xen","description":"This update for xen fixes the following issues:\n\n- CVE-2022-26356: Fixed potential race conditions in dirty memory tracking that\n  could cause a denial of service in the host (bsc#1197423).\n- CVE-2022-26357: Fixed a potential race condition in memory cleanup for hosts\n  using VT-d IOMMU hardware, which could lead to a denial of service in the host\n  (bsc#1197425).\n- CVE-2022-26358,CVE-2022-26359,CVE-2022-26360,CVE-2022-26361: Fixed various memory\n  corruption issues for hosts using VT-d or AMD-Vi IOMMU hardware. These could be\n  leveraged by an attacker to cause a denial of service in the host (bsc#1197426).\n- CVE-2022-0001, CVE-2022-0002, CVE-2021-26401: Added BHB speculation issue\n  mitigations (bsc#1196915).\n","status":"published","published":"2022-04-26T09:19:38Z","modified":"2026-02-04T03:49:48.655391Z","updated_at":"2026-11-02T15:53:50.513981Z"},{"id":"SUSE-SU-2022:1505-1","title":"Security update for xen","description":"This update for xen fixes the following issues:\n\n- CVE-2022-26356: Fixed potential race conditions in dirty memory tracking that\n  could cause a denial of service in the host (bsc#1197423).\n- CVE-2022-26357: Fixed a potential race condition in memory cleanup for hosts\n  using VT-d IOMMU hardware, which could lead to a denial of service in the host\n  (bsc#1197425).\n- CVE-2022-26358,CVE-2022-26359,CVE-2022-26360,CVE-2022-26361: Fixed various memory\n  corruption issues for hosts using VT-d or AMD-Vi IOMMU hardware. These could be\n  leveraged by an attacker to cause a denial of service in the host (bsc#1197426).\n","status":"published","published":"2022-05-03T14:08:07Z","modified":"2026-02-04T02:30:36.982692Z","updated_at":"2026-11-02T15:53:50.513981Z"},{"id":"SUSE-SU-2022:1506-1","title":"Security update for xen","description":"This update for xen fixes the following issues:\n\n- CVE-2022-26356: Fixed potential race conditions in dirty memory tracking that\n  could cause a denial of service in the host (bsc#1197423).\n- CVE-2022-26357: Fixed a potential race condition in memory cleanup for hosts\n  using VT-d IOMMU hardware, which could lead to a denial of service in the host\n  (bsc#1197425).\n- CVE-2022-26358,CVE-2022-26359,CVE-2022-26360,CVE-2022-26361: Fixed various memory\n  corruption issues for hosts using VT-d or AMD-Vi IOMMU hardware. These could be\n  leveraged by an attacker to cause a denial of service in the host (bsc#1197426).\n","status":"published","published":"2022-05-03T14:08:20Z","modified":"2026-02-04T03:03:56.466939Z","updated_at":"2026-11-02T15:53:50.513981Z"},{"id":"SUSE-SU-2022:2158-1","title":"Security update for xen","description":"This update for xen fixes the following issues:\n\n- CVE-2022-26356: Fixed potential race conditions in dirty memory tracking that\n  could cause a denial of service in the host (bsc#1197423).\n- CVE-2022-26357: Fixed a potential race condition in memory cleanup for hosts\n  using VT-d IOMMU hardware, which could lead to a denial of service in the host\n  (bsc#1197425).\n- CVE-2022-26358,CVE-2022-26359,CVE-2022-26360,CVE-2022-26361: Fixed various memory\n  corruption issues for hosts using VT-d or AMD-Vi IOMMU hardware. These could be\n  leveraged by an attacker to cause a denial of service in the host (bsc#1197426).\n- CVE-2022-26362: Fixed race condition in typeref acquisition (bsc#1199965)\n- CVE-2022-26363, CVE-2022-26364: Fixed insufficient care with non-coherent mappings (bsc#1199966)\n","status":"published","published":"2022-06-23T08:03:57Z","modified":"2026-02-04T04:04:32.27714Z","updated_at":"2026-11-02T15:53:50.513981Z"}]}}