CVE-2022-26362 Race condition in xen
A race condition in Xen's type reference acquisition allows PV guests to bypass write protection on page tables, potentially leading to privilege escalation or code execution.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2022-26362?
CVE-2022-26362 is a medium-severity vulnerability in Debian Debian Linux, published on 9 Jun 2022. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
x86 pv: Race condition in typeref acquisition Xen maintains a type reference count for pages, in addition to a regular reference count. This scheme is used to maintain invariants required for Xen's safety, e.g. PV guests may not have direct writeable access to pagetables; updates need auditing by Xen. Unfortunately, the logic for acquiring a type reference has a race condition, whereby a safely TLB flush is issued too early and creates a window where the guest can re-establish the read/write mapping before writeability is prohibited.
Weakness: CWE-362
Which versions are affected by CVE-2022-26362?
It affects 3 products.
Products include Debian Debian Linux, Fedoraproject Fedora, Xen Xen.
How do I fix CVE-2022-26362?
Apply the vendor's patch.
Is CVE-2022-26362 being exploited?
There is no known exploitation of CVE-2022-26362 in the wild and no public exploit code.
Other vulnerabilities in Debian Debian Linux
Sources
Also known as ALPINE-CVE-2022-26362, DEBIAN-CVE-2022-26362, GHSA-2mfj-vmvj-q937, UBUNTU-CVE-2022-26362.