CVE catalog

CVE-2022-26361

xen: CVE-2022-26361

Severity: Medium · CVSS 5.7CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:H
Published: Apr 5, 2022, 10:00:00 PM UTC
Source: [NVD] · [CVE record]
EPSS: 0.36% · Oct 25, 2026

IOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Certain PCI devices in a system might be assigned Reserved Memory Regions (specified via Reserved Memory Region Reporting, "RMRR") for Intel VT-d or Unity Mapping ranges for AMD-Vi. These are typically used for platform tasks such as legacy USB emulation. Since the precise purpose of these regions is unknown, once a device associated with such a region is active, the mappings of these regions need to remain continuouly accessible by the device. This requirement has been violated. Subsequent DMA or interrupts from the device may have unpredictable behaviour, ranging from IOMMU faults to memory corruption.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	xen	sid	`4.20.4+39-gf1e1321c87-1`	fixed
Debian	xen	forky	`4.20.4+39-gf1e1321c87-1`	fixed
Debian	xen	trixie	`4.20.3+127-gc42374a105-0+deb13u1`	fixed
Debian	xen	trixie-security	`4.20.4+39-gf1e1321c87-0+deb13u1`	fixed
Debian	xen	bookworm	`4.17.5+72-g01140da4e8-1`	fixed
Debian	xen	bookworm-security	`4.17.7-0+deb12u1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	xen	source	sid	`4.16.1-1`	not yet assigned	Not reported	Not reported
Debian	xen	source	forky	`4.16.1-1`	not yet assigned	Not reported	Not reported
Debian	xen	source	trixie	`4.16.1-1`	not yet assigned	Not reported	Not reported
Debian	xen	source	bookworm	`4.16.1-1`	not yet assigned	Not reported	Not reported

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

[Debian 12 (Bookworm)]

[libxencall1]Unknown
Source package: [xen]
Details (4)
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm
  Fixed · Fixed: 4.16.1-1
  dsa · xen · debian · bookworm
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm
  Fixed · Fixed: 4.16.1-1
  dsa · xen · debian · bookworm
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
  Fixed · Fixed: 4.16.1-1
  dsa · xen · debian · bookworm
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
  Fixed · Fixed: 4.16.1-1
  dsa · xen · debian · bookworm
[libxen-dev]Unknown
Source package: [xen]
Details (4)
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm
  Fixed · Fixed: 4.16.1-1
  dsa · xen · debian · bookworm
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm
  Fixed · Fixed: 4.16.1-1
  dsa · xen · debian · bookworm
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
  Fixed · Fixed: 4.16.1-1
  dsa · xen · debian · bookworm
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
  Fixed · Fixed: 4.16.1-1
  dsa · xen · debian · bookworm
[libxendevicemodel1]Unknown
Source package: [xen]
Details (4)
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm
  Fixed · Fixed: 4.16.1-1
  dsa · xen · debian · bookworm
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm
  Fixed · Fixed: 4.16.1-1
  dsa · xen · debian · bookworm
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
  Fixed · Fixed: 4.16.1-1
  dsa · xen · debian · bookworm
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
  Fixed · Fixed: 4.16.1-1
  dsa · xen · debian · bookworm
[libxenevtchn1]Unknown
Source package: [xen]
Details (4)
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm
  Fixed · Fixed: 4.16.1-1
  dsa · xen · debian · bookworm
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm
  Fixed · Fixed: 4.16.1-1
  dsa · xen · debian · bookworm
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
  Fixed · Fixed: 4.16.1-1
  dsa · xen · debian · bookworm
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
  Fixed · Fixed: 4.16.1-1
  dsa · xen · debian · bookworm
[libxenforeignmemory1]Unknown
Source package: [xen]
Details (4)
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm
  Fixed · Fixed: 4.16.1-1
  dsa · xen · debian · bookworm
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm
  Fixed · Fixed: 4.16.1-1
  dsa · xen · debian · bookworm
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
  Fixed · Fixed: 4.16.1-1
  dsa · xen · debian · bookworm
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
  Fixed · Fixed: 4.16.1-1
  dsa · xen · debian · bookworm
[libxengnttab1]Unknown
Source package: [xen]
Details (4)
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm
  Fixed · Fixed: 4.16.1-1
  dsa · xen · debian · bookworm
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm
  Fixed · Fixed: 4.16.1-1
  dsa · xen · debian · bookworm
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
  Fixed · Fixed: 4.16.1-1
  dsa · xen · debian · bookworm
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
  Fixed · Fixed: 4.16.1-1
  dsa · xen · debian · bookworm
[libxenhypfs1]Unknown
Source package: [xen]
Details (4)
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm
  Fixed · Fixed: 4.16.1-1
  dsa · xen · debian · bookworm
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm
  Fixed · Fixed: 4.16.1-1
  dsa · xen · debian · bookworm
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
  Fixed · Fixed: 4.16.1-1
  dsa · xen · debian · bookworm
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
  Fixed · Fixed: 4.16.1-1
  dsa · xen · debian · bookworm
[libxenmisc4.17]Unknown
Source package: [xen]
Details (4)
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm
  Fixed · Fixed: 4.16.1-1
  dsa · xen · debian · bookworm
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm
  Fixed · Fixed: 4.16.1-1
  dsa · xen · debian · bookworm
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
  Fixed · Fixed: 4.16.1-1
  dsa · xen · debian · bookworm
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
  Fixed · Fixed: 4.16.1-1
  dsa · xen · debian · bookworm
[libxenstore4]Unknown
Source package: [xen]
Details (4)
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm
  Fixed · Fixed: 4.16.1-1
  dsa · xen · debian · bookworm
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm
  Fixed · Fixed: 4.16.1-1
  dsa · xen · debian · bookworm
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
  Fixed · Fixed: 4.16.1-1
  dsa · xen · debian · bookworm
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
  Fixed · Fixed: 4.16.1-1
  dsa · xen · debian · bookworm
[libxentoolcore1]Unknown
Source package: [xen]
Details (4)
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm
  Fixed · Fixed: 4.16.1-1
  dsa · xen · debian · bookworm
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm
  Fixed · Fixed: 4.16.1-1
  dsa · xen · debian · bookworm
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
  Fixed · Fixed: 4.16.1-1
  dsa · xen · debian · bookworm
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
  Fixed · Fixed: 4.16.1-1
  dsa · xen · debian · bookworm
[libxentoollog1]Unknown
Source package: [xen]
Details (4)
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm
  Fixed · Fixed: 4.16.1-1
  dsa · xen · debian · bookworm
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm
  Fixed · Fixed: 4.16.1-1
  dsa · xen · debian · bookworm
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
  Fixed · Fixed: 4.16.1-1
  dsa · xen · debian · bookworm
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
  Fixed · Fixed: 4.16.1-1
  dsa · xen · debian · bookworm
[xen-doc]Unknown
Source package: [xen]
Details (4)
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm
  Fixed · Fixed: 4.16.1-1
  dsa · xen · debian · bookworm
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm
  Fixed · Fixed: 4.16.1-1
  dsa · xen · debian · bookworm
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
  Fixed · Fixed: 4.16.1-1
  dsa · xen · debian · bookworm
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
  Fixed · Fixed: 4.16.1-1
  dsa · xen · debian · bookworm
[xen-hypervisor-4.17-amd64]Unknown
Source package: [xen]
Details (2)
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm
  Fixed · Fixed: 4.16.1-1
  dsa · xen · debian · bookworm
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
  Fixed · Fixed: 4.16.1-1
  dsa · xen · debian · bookworm
[xen-hypervisor-4.17-amd64-dbg]Unknown
Source package: [xen]
Details (2)
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm
  Fixed · Fixed: 4.16.1-1
  dsa · xen · debian · bookworm
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
  Fixed · Fixed: 4.16.1-1
  dsa · xen · debian · bookworm
[xen-hypervisor-4.17-arm64]Unknown
Source package: [xen]
Details (2)
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm
  Fixed · Fixed: 4.16.1-1
  dsa · xen · debian · bookworm
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
  Fixed · Fixed: 4.16.1-1
  dsa · xen · debian · bookworm
[xen-hypervisor-4.17-arm64-dbg]Unknown
Source package: [xen]
Details (2)
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm
  Fixed · Fixed: 4.16.1-1
  dsa · xen · debian · bookworm
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
  Fixed · Fixed: 4.16.1-1
  dsa · xen · debian · bookworm
[xen-hypervisor-common]Unknown
Source package: [xen]
Details (4)
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm
  Fixed · Fixed: 4.16.1-1
  dsa · xen · debian · bookworm
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm
  Fixed · Fixed: 4.16.1-1
  dsa · xen · debian · bookworm
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
  Fixed · Fixed: 4.16.1-1
  dsa · xen · debian · bookworm
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
  Fixed · Fixed: 4.16.1-1
  dsa · xen · debian · bookworm
[xenstore-utils]Unknown
Source package: [xen]
Details (4)
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm
  Fixed · Fixed: 4.16.1-1
  dsa · xen · debian · bookworm
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm
  Fixed · Fixed: 4.16.1-1
  dsa · xen · debian · bookworm
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
  Fixed · Fixed: 4.16.1-1
  dsa · xen · debian · bookworm
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
  Fixed · Fixed: 4.16.1-1
  dsa · xen · debian · bookworm
[xen-system-amd64]Unknown
Source package: [xen]
Details (2)
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm
  Fixed · Fixed: 4.16.1-1
  dsa · xen · debian · bookworm
- 4.17.5+72-g01140da4e8-1 · amd64 · bookworm-security
  Fixed · Fixed: 4.16.1-1
  dsa · xen · debian · bookworm
[xen-system-arm64]Unknown
Source package: [xen]
Details (2)
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm
  Fixed · Fixed: 4.16.1-1
  dsa · xen · debian · bookworm
- 4.17.5+72-g01140da4e8-1 · arm64 · bookworm-security
  Fixed · Fixed: 4.16.1-1
  dsa · xen · debian · bookworm

Next results

Observed: Oct 23, 2026, 6:25:12 PM UTC

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [SUSE security advisories and VEX]