Security update for xen
This update for xen fixes the following issues: - CVE-2022-26356: Fixed potential race conditions in dirty memory tracking that could cause a denial of service in the host (bsc#1197423). - CVE-2022-26357: Fixed a potential race condition in memory cleanup for hosts using VT-d IOMMU hardware, which could lead to a denial of service in the host (bsc#1197425). - CVE-2022-26358,CVE-2022-26359,CVE-2022-26360,CVE-2022-26361: Fixed various memory corruption issues for hosts using VT-d or AMD-Vi IOMMU hardware. These could be leveraged by an attacker to cause a denial of service in the host (bsc#1197426). - CVE-2022-26362: Fixed race condition in typeref acquisition (bsc#1199965) - CVE-2022-26363, CVE-2022-26364: Fixed insufficient care with non-coherent mappings (bsc#1199966)
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for xen fixes the following issues: - CVE-2022-26356: Fixed potential race conditions in dirty memory tracking that could cause a denial of service in the host (bsc#1197423). - CVE-2022-26357: Fixed a potential race condition in memory cleanup for hosts using VT-d IOMMU hardware, which could lead to a denial of service in the host (bsc#1197425). - CVE-2022-26358,CVE-2022-26359,CVE-2022-26360,CVE-2022-26361: Fixed various memory corruption issues for hosts using VT-d or AMD-Vi IOMMU hardware. These could be leveraged by an attacker to cause a denial of service in the host (bsc#1197426). - CVE-2022-26362: Fixed race condition in typeref acquisition (bsc#1199965) - CVE-2022-26363, CVE-2022-26364: Fixed insufficient care with non-coherent mappings (bsc#1199966)
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1197423
- https://bugzilla.suse.com/1197425
- https://bugzilla.suse.com/1197426
- https://bugzilla.suse.com/1199965
- https://bugzilla.suse.com/1199966
- https://www.suse.com/security/cve/CVE-2022-26356
- https://www.suse.com/security/cve/CVE-2022-26357
- https://www.suse.com/security/cve/CVE-2022-26358
- https://www.suse.com/security/cve/CVE-2022-26359
- https://www.suse.com/security/cve/CVE-2022-26360
- https://www.suse.com/security/cve/CVE-2022-26361
- https://www.suse.com/security/cve/CVE-2022-26362
- https://www.suse.com/security/cve/CVE-2022-26363
- https://www.suse.com/security/cve/CVE-2022-26364
- https://www.suse.com/support/update/announcement/2022/suse-su-20222158-1/