CVE-2022-26364

Related Files

Debian Security Advisory 5184-1

Posted Jul 28, 2022

Authored by Debian | Site debian.org

Debian Linux Security Advisory 5184-1 - Multiple vulnerabilities have been discovered in the Xen hypervisor, which could result in privilege escalation. In addition this updates provides mitigations for the "Retbleed" speculative execution attack and the "MMIO stale data" vulnerabilities.

tags | advisory, vulnerability

systems | linux, debian

advisories | CVE-2022-21123, CVE-2022-21125, CVE-2022-21166, CVE-2022-23816, CVE-2022-23825, CVE-2022-26362, CVE-2022-26363, CVE-2022-26364, CVE-2022-29900

SHA-256 | a6ef7fc52f33a44647f11ad73447e266d15867256950bda60e55581335321822

Download | Favorite | View

Xen PV Guest Non-SELFSNOOP CPU Memory Corruption

Posted Jul 6, 2022

Authored by Jann Horn, Google Security Research

On CPUs without SELFSNOOP support, a Xen PV domain that has access to a PCI device (which grants the domain the ability to set arbitrary cache attributes on all its pages) can trick Xen into validating an L2 pagetable that contains a cacheline that is marked as clean in the cache but actually differs from main memory. After the pagetable has been validated, an attacker can flush the "clean" cacheline, such that on the next load, unvalidated data from main memory shows up in the pagetable.

tags | exploit, arbitrary

advisories | CVE-2022-26364

SHA-256 | 0ca3bec4eaa9cefc4bd68628da583653303fb2bb08f1b14700118565ff032f9c

Download | Favorite | View