CVE-2022-26357

Name of the Vulnerable Software and Affected Versions Xen (affected versions not specified)

Description A race condition exists in the VT-d domain ID cleanup process. Xen domain IDs are up to 15 bits wide, but VT-d hardware may only support less than 15 bits to hold a domain ID, associating a physical device with a particular domain. As a result, Xen domain IDs are mapped to a smaller value range internally. The cleaning up of housekeeping structures has a race, allowing VT-d domain IDs to be leaked and flushes to be bypassed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.