CVE-2022-26357

描述

race in VT-d domain ID cleanup Xen domain IDs are up to 15 bits wide. VT-d hardware may allow for only less than 15 bits to hold a domain ID associating a physical device with a particular domain. Therefore internally Xen domain IDs are mapped to the smaller value range. The cleaning up of the housekeeping structures has a race, allowing for VT-d domain IDs to be leaked and flushes to be bypassed.

如何修補 CVE-2022-26357

要修補 CVE-2022-26357,請將受影響套件升級到下列已修補版本。

• —升級至 4.13.4-r3 或更新版本

CVE-2022-26357 正在被利用嗎?

低 — EPSS 為 0.2%,目前沒有觀察到大規模利用活動。

受影響套件(1)

• >= 4.11.0, < 4.13.4-r3

CVSS 分數

參考連結(1)

• ADVISORYsecurity.alpinelinux.org/vuln/CVE-2022-26357