Race condition in Xen - CVE-2022-26362

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU64446

Race condition in Xen - CVE-2022-26362

Published: June 16, 2022


Vulnerability identifier: #VU64446
CSH Severity: High
CVSS v4: 9.2 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2022-26362
CWE-ID: CWE-362
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to race condition in typeref acquisition Xen. A remote attacker can execute arbitrary code on the target system.


Affected software

Xen
Citrix Hypervisor
SUSE CaaS Platform
SUSE Manager Proxy
SUSE Manager Retail Branch Server
SUSE Manager Server
SUSE Linux Enterprise Micro
SUSE Enterprise Storage
SUSE Linux Enterprise Storage
SUSE OpenStack Cloud
SUSE OpenStack Cloud Crowbar
SUSE Linux Enterprise Server
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise Server for SAP Applications
SUSE Linux Enterprise Software Development Kit
SUSE Linux Enterprise High Performance Computing
SUSE Linux Enterprise Module for Server Applications
SUSE Linux Enterprise Module for Basesystem
SUSE Linux Enterprise Desktop
openSUSE Leap
Fedora
xen
xen-debugsource
xen-doc-html
xen-libs-32bit
xen-libs
xen-libs-debuginfo-32bit
xen-libs-debuginfo
xen-tools
xen-tools-domU-debuginfo
xen-tools-debuginfo
xen-tools-domU
xen-devel
xen-tools-xendomains-wait-disk
xen-libs-32bit-debuginfo
xen (Debian package)
collectd
qemu

How to mitigate CVE-2022-26362

Install updates from vendor's website.

xen - addressed in versions 4.7.6_24-43.91.1, 4.9.4_30-3.106.1, 4.10.4_36-150000.3.77.1, 4.11.4_30-2.76.1, 4.12.4_24-3.71.1, 4.12.4_24-150100.3.72.1, 4.12.4_26-150100.3.75.1, 4.13.4_10-150200.3.55.1, 4.13.4_12-150200.3.58.1, 4.14.5_02-150300.3.29.1, 4.14.5_04-150300.3.32.1, 4.16.1_04-150400.4.5.2, 4.16.1_06-150400.4.8.1
xen-debugsource - addressed in versions 4.7.6_24-43.91.1, 4.9.4_30-3.106.1, 4.10.4_36-150000.3.77.1, 4.11.4_30-2.76.1, 4.12.4_24-3.71.1, 4.12.4_24-150100.3.72.1, 4.12.4_26-150100.3.75.1, 4.13.4_10-150200.3.55.1, 4.13.4_12-150200.3.58.1, 4.14.5_02-150300.3.29.1, 4.14.5_04-150300.3.32.1, 4.16.1_04-150400.4.5.2, 4.16.1_06-150400.4.8.1
xen-doc-html - addressed in versions 4.7.6_24-43.91.1, 4.9.4_30-3.106.1, 4.11.4_30-2.76.1, 4.12.4_24-3.71.1, 4.14.5_02-150300.3.29.1, 4.14.5_04-150300.3.32.1, 4.16.1_04-150400.4.5.2, 4.16.1_06-150400.4.8.1
xen-libs-32bit - addressed in versions 4.7.6_24-43.91.1, 4.9.4_30-3.106.1, 4.11.4_30-2.76.1, 4.12.4_24-3.71.1, 4.14.5_02-150300.3.29.1, 4.14.5_04-150300.3.32.1, 4.16.1_04-150400.4.5.2, 4.16.1_06-150400.4.8.1
xen-libs - addressed in versions 4.7.6_24-43.91.1, 4.9.4_30-3.106.1, 4.10.4_36-150000.3.77.1, 4.11.4_30-2.76.1, 4.12.4_24-3.71.1, 4.12.4_24-150100.3.72.1, 4.12.4_26-150100.3.75.1, 4.13.4_10-150200.3.55.1, 4.13.4_12-150200.3.58.1, 4.14.5_02-150300.3.29.1, 4.14.5_04-150300.3.32.1, 4.16.1_04-150400.4.5.2, 4.16.1_06-150400.4.8.1
xen-libs-debuginfo-32bit - addressed in versions 4.7.6_24-43.91.1, 4.9.4_30-3.106.1, 4.11.4_30-2.76.1, 4.12.4_24-3.71.1
xen-libs-debuginfo - addressed in versions 4.7.6_24-43.91.1, 4.9.4_30-3.106.1, 4.10.4_36-150000.3.77.1, 4.11.4_30-2.76.1, 4.12.4_24-3.71.1, 4.12.4_24-150100.3.72.1, 4.12.4_26-150100.3.75.1, 4.13.4_10-150200.3.55.1, 4.13.4_12-150200.3.58.1, 4.14.5_02-150300.3.29.1, 4.14.5_04-150300.3.32.1, 4.16.1_04-150400.4.5.2, 4.16.1_06-150400.4.8.1
xen-tools - addressed in versions 4.7.6_24-43.91.1, 4.9.4_30-3.106.1, 4.10.4_36-150000.3.77.1, 4.11.4_30-2.76.1, 4.12.4_24-3.71.1, 4.12.4_24-150100.3.72.1, 4.12.4_26-150100.3.75.1, 4.13.4_10-150200.3.55.1, 4.13.4_12-150200.3.58.1, 4.14.5_02-150300.3.29.1, 4.14.5_04-150300.3.32.1, 4.16.1_04-150400.4.5.2, 4.16.1_06-150400.4.8.1
xen-tools-domU-debuginfo - addressed in versions 4.7.6_24-43.91.1, 4.9.4_30-3.106.1, 4.10.4_36-150000.3.77.1, 4.11.4_30-2.76.1, 4.12.4_24-3.71.1, 4.12.4_24-150100.3.72.1, 4.12.4_26-150100.3.75.1, 4.13.4_10-150200.3.55.1, 4.13.4_12-150200.3.58.1, 4.14.5_02-150300.3.29.1, 4.14.5_04-150300.3.32.1, 4.16.1_04-150400.4.5.2, 4.16.1_06-150400.4.8.1
xen-tools-debuginfo - addressed in versions 4.7.6_24-43.91.1, 4.9.4_30-3.106.1, 4.10.4_36-150000.3.77.1, 4.11.4_30-2.76.1, 4.12.4_24-3.71.1, 4.12.4_24-150100.3.72.1, 4.12.4_26-150100.3.75.1, 4.13.4_10-150200.3.55.1, 4.13.4_12-150200.3.58.1, 4.14.5_02-150300.3.29.1, 4.14.5_04-150300.3.32.1, 4.16.1_04-150400.4.5.2, 4.16.1_06-150400.4.8.1
xen-tools-domU - addressed in versions 4.7.6_24-43.91.1, 4.9.4_30-3.106.1, 4.10.4_36-150000.3.77.1, 4.11.4_30-2.76.1, 4.12.4_24-3.71.1, 4.12.4_24-150100.3.72.1, 4.12.4_26-150100.3.75.1, 4.13.4_10-150200.3.55.1, 4.13.4_12-150200.3.58.1, 4.14.5_02-150300.3.29.1, 4.14.5_04-150300.3.32.1, 4.16.1_04-150400.4.5.2, 4.16.1_06-150400.4.8.1
xen-devel - addressed in versions 4.10.4_36-150000.3.77.1, 4.12.4_24-3.71.1, 4.12.4_24-150100.3.72.1, 4.12.4_26-150100.3.75.1, 4.13.4_10-150200.3.55.1, 4.13.4_12-150200.3.58.1, 4.14.5_02-150300.3.29.1, 4.14.5_04-150300.3.32.1, 4.16.1_04-150400.4.5.2, 4.16.1_06-150400.4.8.1
xen-tools-xendomains-wait-disk - addressed in versions 4.13.4_10-150200.3.55.1, 4.13.4_12-150200.3.58.1, 4.14.5_02-150300.3.29.1, 4.14.5_04-150300.3.32.1, 4.16.1_04-150400.4.5.2, 4.16.1_06-150400.4.8.1
xen-libs-32bit-debuginfo - addressed in versions 4.14.5_02-150300.3.29.1, 4.14.5_04-150300.3.32.1, 4.16.1_04-150400.4.5.2, 4.16.1_06-150400.4.8.1
xen (Debian package) - update to 4.14.5+24-g87d90d511c-1
xen - addressed in versions 4.15.2-5.fc35, 4.15.3-1.fc35, 4.15.3-2.fc35, 4.16.1-2.fc36
collectd - update to 5.12.0-16.fc36
qemu - update to 6.2.0-12.fc36

External References

Related Security Bulletins