File _patchinfo of Package patchinfo.23583

Overview Repositories Revisions Requests Users Attributes Meta

File _patchinfo of Package patchinfo.23583

<patchinfo incident="23583">
  <issue tracker="bnc" id="1197425">VUL-0: CVE-2022-26357: xen: race in VT-d domain ID cleanup (XSA-399)</issue>
  <issue tracker="bnc" id="1197423">VUL-0: CVE-2022-26356: xen: Racy interactions between dirty vram tracking and paging log dirty hypercalls (XSA-397)</issue>
  <issue tracker="bnc" id="1197426">VUL-0: CVE-2022-26358,CVE-2022-26359,CVE-2022-26360,CVE-2022-26361: xen:  IOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues (XSA-400)</issue>
  <issue tracker="bnc" id="1199965">VUL-0: EMBARGOED: CVE-2022-26362: xen: Race condition in typeref acquisition (XSA-401)</issue>
  <issue tracker="bnc" id="1199966">VUL-0: EMBARGOED: CVE-2022-26363,CVE-2022-26364: xen: Insufficient care with non-coherent mappings (XSA-402)</issue>
  <issue tracker="cve" id="2022-26356"/>
  <issue tracker="cve" id="2022-26357"/>
  <issue tracker="cve" id="2022-26358"/>
  <issue tracker="cve" id="2022-26359"/>
  <issue tracker="cve" id="2022-26360"/>
  <issue tracker="cve" id="2022-26361"/>
  <issue tracker="cve" id="2022-26362"/>
  <issue tracker="cve" id="2022-26363"/>
  <issue tracker="cve" id="2022-26364"/>
  <packager>charlesa</packager>
  <rating>important</rating>
  <category>security</category>
  <summary>Security update for xen</summary>
  <reboot_needed/>
  <description>This update for xen fixes the following issues:

- CVE-2022-26356: Fixed potential race conditions in dirty memory tracking that
  could cause a denial of service in the host (bsc#1197423).
- CVE-2022-26357: Fixed a potential race condition in memory cleanup for hosts
  using VT-d IOMMU hardware, which could lead to a denial of service in the host
  (bsc#1197425).
- CVE-2022-26358,CVE-2022-26359,CVE-2022-26360,CVE-2022-26361: Fixed various memory
  corruption issues for hosts using VT-d or AMD-Vi IOMMU hardware. These could be
  leveraged by an attacker to cause a denial of service in the host (bsc#1197426).
- CVE-2022-26362: Fixed race condition in typeref acquisition (bsc#1199965)
- CVE-2022-26363, CVE-2022-26364: Fixed insufficient care with non-coherent mappings (bsc#1199966)
</description>
</patchinfo>

Places

File _patchinfo of Package patchinfo.23583

Places