CVE-2022-26356
Summary
| CVE | CVE-2022-26356 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2022-04-05 13:15:00 UTC |
|---|
| Updated | 2024-02-04 08:15:00 UTC |
|---|
| Description | Racy interactions between dirty vram tracking and paging log dirty hypercalls Activation of log dirty mode done by XEN_DMOP_track_dirty_vram (was named HVMOP_track_dirty_vram before Xen 4.9) is racy with ongoing log dirty hypercalls. A suitably timed call to XEN_DMOP_track_dirty_vram can enable log dirty while another CPU is still in the process of tearing down the structures related to a previously enabled log dirty mode (XEN_DOMCTL_SHADOW_OP_OFF). This is due to lack of mutually exclusive locking between both operations and can lead to entries being added in already freed slots, resulting in a memory leak. |
|---|
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| Debian -- Security Information -- DSA-5117-1 xen |
DEBIAN |
www.debian.org |
|
| [SECURITY] Fedora 35 Update: xen-4.15.2-3.fc35 - package-announce - Fedora Mailing-Lists |
FEDORA |
lists.fedoraproject.org |
|
| Xen: Multiple Vulnerabilities (GLSA 202402-07) — Gentoo security |
|
security.gentoo.org |
|
| oss-security - Xen Security Advisory 397 v2 (CVE-2022-26356) - Racy interactions
between dirty vram tracking and paging log dirty hypercalls |
MLIST |
www.openwall.com |
|
| [SECURITY] Fedora 34 Update: xen-4.14.5-1.fc34 - package-announce - Fedora Mailing-Lists |
|
lists.fedoraproject.org |
|
| [SECURITY] Fedora 35 Update: xen-4.15.2-3.fc35 - package-announce - Fedora Mailing-Lists |
|
lists.fedoraproject.org |
|
| [SECURITY] Fedora 34 Update: xen-4.14.5-1.fc34 - package-announce - Fedora Mailing-Lists |
FEDORA |
lists.fedoraproject.org |
|
| xenbits.xenproject.org/xsa/advisory-397.txt |
MISC |
xenbits.xenproject.org |
|
| XSA-397 - Xen Security Advisories |
CONFIRM |
xenbits.xen.org |
|
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
Vendor Comments And Credit
Discovery Credit
LEGACY: Array
Legacy QID Mappings
- 179182 Debian Security Update for xen (DSA 5117-1)
- 184860 Debian Security Update for xen (CVE-2022-26356)
- 282617 Fedora Security Update for xen (FEDORA-2022-dfbf7e2372)
- 282643 Fedora Security Update for xen (FEDORA-2022-64b2c02d29)
- 390260 Oracle Managed Virtualization (VM) Server for x86 Security Update for xen (OVMSA-2022-0012)
- 500806 Alpine Linux Security Update for xen
- 501523 Alpine Linux Security Update for xen
- 502242 Alpine Linux Security Update for xen
- 502421 Alpine Linux Security Update for xen
- 504548 Alpine Linux Security Update for xen
- 710858 Gentoo Linux Xen Multiple Vulnerabilities (GLSA 202402-07)
- 752054 SUSE Enterprise Linux Security Update for xen (SUSE-SU-2022:1285-1)
- 752065 SUSE Enterprise Linux Security Update for xen (SUSE-SU-2022:1300-1)
- 752073 SUSE Enterprise Linux Security Update for xen (SUSE-SU-2022:1359-1)
- 752075 SUSE Enterprise Linux Security Update for xen (SUSE-SU-2022:1408-1)
- 752099 SUSE Enterprise Linux Security Update for xen (SUSE-SU-2022:1506-1)
- 752100 SUSE Enterprise Linux Security Update for xen (SUSE-SU-2022:1505-1)
- 752262 SUSE Enterprise Linux Security Update for xen (SUSE-SU-2022:2158-1)
