CVE catalog

CVE-2022-26356

xen: CVE-2022-26356

[CVE catalog]

Severity
Medium · CVSS 6.7CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:H
Published
Source
[NVD] · [CVE record]
EPSS
0.24% · Oct 25, 2026

Racy interactions between dirty vram tracking and paging log dirty hypercalls Activation of log dirty mode done by XEN_DMOP_track_dirty_vram (was named HVMOP_track_dirty_vram before Xen 4.9) is racy with ongoing log dirty hypercalls. A suitably timed call to XEN_DMOP_track_dirty_vram can enable log dirty while another CPU is still in the process of tearing down the structures related to a previously enabled log dirty mode (XEN_DOMCTL_SHADOW_OP_OFF). This is due to lack of mutually exclusive locking between both operations and can lead to entries being added in already freed slots, resulting in a memory leak.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianxensid4.20.4+39-gf1e1321c87-1fixed
Debianxenforky4.20.4+39-gf1e1321c87-1fixed
Debianxentrixie4.20.3+127-gc42374a105-0+deb13u1fixed
Debianxentrixie-security4.20.4+39-gf1e1321c87-0+deb13u1fixed
Debianxenbookworm4.17.5+72-g01140da4e8-1fixed
Debianxenbookworm-security4.17.7-0+deb12u1fixed
Susexenlinux enterprise high performance computing 15 sp1-espos4.12.4_24-150100.3.72.1fixed
Susexenlinux enterprise high performance computing 15 sp1-ltss4.12.4_24-150100.3.72.1fixed
Susexenlinux enterprise server 15 sp1-bcl4.12.4_24-150100.3.72.1fixed
Susexenlinux enterprise server 15 sp1-ltss4.12.4_24-150100.3.72.1fixed
Susexenlinux enterprise server for sap applications 15 sp14.12.4_24-150100.3.72.1fixed
Susexenenterprise storage 64.12.4_24-150100.3.72.1fixed
Susexenlinux enterprise module for basesystem 15 sp34.14.4_04-150300.3.24.1fixed
Susexenlinux enterprise module for server applications 15 sp34.14.4_04-150300.3.24.1fixed
Susexenlinux enterprise micro 5.14.14.4_04-150300.3.24.1fixed
Susexenlinux enterprise micro 5.24.14.4_04-150300.3.24.1fixed
Opensusexenleap 15.34.14.4_04-150300.3.24.1fixed
Opensusexentumbleweed4.16.0_08-1.1fixed
Susexenlinux enterprise software development kit 12 sp54.12.4_22-3.66.1fixed
Susexenlinux enterprise server 12 sp54.12.4_22-3.66.1fixed
Susexenlinux enterprise server for sap applications 12 sp54.12.4_22-3.66.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianxensourcesid4.16.1-1not yet assignedNot reportedNot reported
Debianxensourceforky4.16.1-1not yet assignedNot reportedNot reported
Debianxensourcetrixie4.16.1-1not yet assignedNot reportedNot reported
Debianxensourcebookworm4.16.1-1not yet assignedNot reportedNot reported
Susexenrpmlinux enterprise high performance computing 15 sp1-espos4.12.4_24-150100.3.72.1Not reportedSUSE-SU-2022:2158-1Not reported
Susexenrpmlinux enterprise high performance computing 15 sp1-ltss4.12.4_24-150100.3.72.1Not reportedSUSE-SU-2022:2158-1Not reported
Susexenrpmlinux enterprise server 15 sp1-bcl4.12.4_24-150100.3.72.1Not reportedSUSE-SU-2022:2158-1Not reported
Susexenrpmlinux enterprise server 15 sp1-ltss4.12.4_24-150100.3.72.1Not reportedSUSE-SU-2022:2158-1Not reported
Susexenrpmlinux enterprise server for sap applications 15 sp14.12.4_24-150100.3.72.1Not reportedSUSE-SU-2022:2158-1Not reported
Susexenrpmenterprise storage 64.12.4_24-150100.3.72.1Not reportedSUSE-SU-2022:2158-1Not reported
Susexenrpmlinux enterprise module for basesystem 15 sp34.14.4_04-150300.3.24.1Not reportedSUSE-SU-2022:1506-1Not reported
Susexenrpmlinux enterprise module for server applications 15 sp34.14.4_04-150300.3.24.1Not reportedSUSE-SU-2022:1506-1Not reported
Susexenrpmlinux enterprise micro 5.14.14.4_04-150300.3.24.1Not reportedSUSE-SU-2022:1506-1Not reported
Susexenrpmlinux enterprise micro 5.24.14.4_04-150300.3.24.1Not reportedSUSE-SU-2022:1506-1Not reported
Opensusexenrpmleap 15.34.14.4_04-150300.3.24.1Not reportedSUSE-SU-2022:1506-1Not reported
Opensusexenrpmtumbleweed4.16.0_08-1.1Not reportedOPENSUSE-SU-2024:11979-1Not reported
Susexenrpmlinux enterprise software development kit 12 sp54.12.4_22-3.66.1Not reportedSUSE-SU-2022:1505-1Not reported
Susexenrpmlinux enterprise server 12 sp54.12.4_22-3.66.1Not reportedSUSE-SU-2022:1505-1Not reported
Susexenrpmlinux enterprise server for sap applications 12 sp54.12.4_22-3.66.1Not reportedSUSE-SU-2022:1505-1Not reported

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

  • [libxencall1]Unknown

    Source package: [xen]

    Details (4)

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.16.1-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm

      Fixed · Fixed: 4.16.1-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.16.1-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security

      Fixed · Fixed: 4.16.1-1

      dsa · xen · debian · bookworm

  • [libxen-dev]Unknown

    Source package: [xen]

    Details (4)

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.16.1-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm

      Fixed · Fixed: 4.16.1-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.16.1-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security

      Fixed · Fixed: 4.16.1-1

      dsa · xen · debian · bookworm

  • [libxendevicemodel1]Unknown

    Source package: [xen]

    Details (4)

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.16.1-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm

      Fixed · Fixed: 4.16.1-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.16.1-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security

      Fixed · Fixed: 4.16.1-1

      dsa · xen · debian · bookworm

  • [libxenevtchn1]Unknown

    Source package: [xen]

    Details (4)

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.16.1-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm

      Fixed · Fixed: 4.16.1-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.16.1-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security

      Fixed · Fixed: 4.16.1-1

      dsa · xen · debian · bookworm

  • [libxenforeignmemory1]Unknown

    Source package: [xen]

    Details (4)

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.16.1-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm

      Fixed · Fixed: 4.16.1-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.16.1-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security

      Fixed · Fixed: 4.16.1-1

      dsa · xen · debian · bookworm

  • [libxengnttab1]Unknown

    Source package: [xen]

    Details (4)

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.16.1-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm

      Fixed · Fixed: 4.16.1-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.16.1-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security

      Fixed · Fixed: 4.16.1-1

      dsa · xen · debian · bookworm

  • [libxenhypfs1]Unknown

    Source package: [xen]

    Details (4)

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.16.1-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm

      Fixed · Fixed: 4.16.1-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.16.1-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security

      Fixed · Fixed: 4.16.1-1

      dsa · xen · debian · bookworm

  • [libxenmisc4.17]Unknown

    Source package: [xen]

    Details (4)

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.16.1-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm

      Fixed · Fixed: 4.16.1-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.16.1-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security

      Fixed · Fixed: 4.16.1-1

      dsa · xen · debian · bookworm

  • [libxenstore4]Unknown

    Source package: [xen]

    Details (4)

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.16.1-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm

      Fixed · Fixed: 4.16.1-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.16.1-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security

      Fixed · Fixed: 4.16.1-1

      dsa · xen · debian · bookworm

  • [libxentoolcore1]Unknown

    Source package: [xen]

    Details (4)

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.16.1-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm

      Fixed · Fixed: 4.16.1-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.16.1-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security

      Fixed · Fixed: 4.16.1-1

      dsa · xen · debian · bookworm

  • [libxentoollog1]Unknown

    Source package: [xen]

    Details (4)

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.16.1-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm

      Fixed · Fixed: 4.16.1-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.16.1-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security

      Fixed · Fixed: 4.16.1-1

      dsa · xen · debian · bookworm

  • [xen-doc]Unknown

    Source package: [xen]

    Details (4)

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.16.1-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm

      Fixed · Fixed: 4.16.1-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.16.1-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security

      Fixed · Fixed: 4.16.1-1

      dsa · xen · debian · bookworm

  • [xen-hypervisor-4.17-amd64]Unknown

    Source package: [xen]

    Details (2)

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.16.1-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.16.1-1

      dsa · xen · debian · bookworm

  • [xen-hypervisor-4.17-amd64-dbg]Unknown

    Source package: [xen]

    Details (2)

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.16.1-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.16.1-1

      dsa · xen · debian · bookworm

  • [xen-hypervisor-4.17-arm64]Unknown

    Source package: [xen]

    Details (2)

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm

      Fixed · Fixed: 4.16.1-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security

      Fixed · Fixed: 4.16.1-1

      dsa · xen · debian · bookworm

  • [xen-hypervisor-4.17-arm64-dbg]Unknown

    Source package: [xen]

    Details (2)

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm

      Fixed · Fixed: 4.16.1-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security

      Fixed · Fixed: 4.16.1-1

      dsa · xen · debian · bookworm

  • [xen-hypervisor-common]Unknown

    Source package: [xen]

    Details (4)

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.16.1-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm

      Fixed · Fixed: 4.16.1-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.16.1-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security

      Fixed · Fixed: 4.16.1-1

      dsa · xen · debian · bookworm

  • [xenstore-utils]Unknown

    Source package: [xen]

    Details (4)

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.16.1-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm

      Fixed · Fixed: 4.16.1-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.16.1-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security

      Fixed · Fixed: 4.16.1-1

      dsa · xen · debian · bookworm

  • [xen-system-amd64]Unknown

    Source package: [xen]

    Details (2)

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm

      Fixed · Fixed: 4.16.1-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security

      Fixed · Fixed: 4.16.1-1

      dsa · xen · debian · bookworm

  • [xen-system-arm64]Unknown

    Source package: [xen]

    Details (2)

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm

      Fixed · Fixed: 4.16.1-1

      dsa · xen · debian · bookworm

    • 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security

      Fixed · Fixed: 4.16.1-1

      dsa · xen · debian · bookworm

Next results

Observed:

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]