CVE-2022-26362

Related Files

Debian Security Advisory 5184-1

Posted Jul 28, 2022

Authored by Debian | Site debian.org

Debian Linux Security Advisory 5184-1 - Multiple vulnerabilities have been discovered in the Xen hypervisor, which could result in privilege escalation. In addition this updates provides mitigations for the "Retbleed" speculative execution attack and the "MMIO stale data" vulnerabilities.

tags | advisory, vulnerability

systems | linux, debian

advisories | CVE-2022-21123, CVE-2022-21125, CVE-2022-21166, CVE-2022-23816, CVE-2022-23825, CVE-2022-26362, CVE-2022-26363, CVE-2022-26364, CVE-2022-29900

SHA-256 | a6ef7fc52f33a44647f11ad73447e266d15867256950bda60e55581335321822

Download | Favorite | View

Xen TLB Flush Bypass

Posted Jul 11, 2022

Authored by Jann Horn, Google Security Research

Xen's _get_page_type() contains an ABAC cmpxchg() race, where the code incorrectly assumes that if it reads a specific type_info value, and then later cmpxchg() succeeds, the type_info can't have changed in between.

tags | exploit

advisories | CVE-2022-26362

SHA-256 | 88fe91f31a1fa5b68860cd0112d829c44076320a17d995120f8a3d426cc59af7

Download | Favorite | View