All vulnerabilities

Servers and applications

CVE-2022-26357

race in VT-d domain ID cleanup Xen domain IDs are up to 15 bits wide. VT-d hardware may allow for only less than 15 bits to hold a domain ID associating a physical device with a particular domain. Therefore internally Xen domain IDs are mapped to the smaller value range. The cleaning up of the housekeeping structures has a race, allowing for VT-d domain IDs to be leaked and flushes to be bypassed.

Severity
High 7.0
Published
5 Apr 2022
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
4.12.0, 4.16.0
Sources
NVD

Affected software

SoftwareAffected versions
XenServers and applications · cpe:o:xen:xen
  • From 4.11.0 before 4.12.0
  • From 4.13.0 before 4.16.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2022-26357
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2022-26357