CVE-2022-26362

Description

x86 pv: Race condition in typeref acquisition Xen maintains a type reference count for pages, in addition to a regular reference count. This scheme is used to maintain invariants required for Xen's safety, e.g. PV guests may not have direct writeable access to pagetables; updates need auditing by Xen. Unfortunately, the logic for acquiring a type reference has a race condition, whereby a safely TLB flush is issued too early and creates a window where the guest can re-establish the read/write mapping before writeability is prohibited.

How to fix CVE-2022-26362

To remediate CVE-2022-26362, upgrade the affected package to a fixed version below.

• —upgrade to 4.14.5-r1 or later
• —upgrade to 4.14.5+24-g87d90d511c-1 or later

Is CVE-2022-26362 being exploited?

Low — EPSS is 0.0%, meaning exploitation activity has not been observed at scale.

Affected packages (2)

• from 0, < 4.14.5-r1
• from 0, < 4.14.5+24-g87d90d511c-1

CVSS scores

References (2)

• ADVISORYsecurity.alpinelinux.org/vuln/CVE-2022-26362
• ADVISORYsecurity-tracker.debian.org/tracker/CVE-2022-26362