CVE-2022-26356: Debian Linux

Medium severity, CVSS 5.6. EPSS: 0.2% chance of exploitation in the next 30 days.

Racy interactions between dirty vram tracking and paging log dirty hypercalls Activation of log dirty mode done by XEN_DMOP_track_dirty_vram (was named HVMOP_track_dirty_vram before Xen 4.9) is racy with ongoing log dirty hypercalls. A suitably timed call to XEN_DMOP_track_dirty_vram can enable log dirty while another CPU is still in the process of tearing down the structures related to a previously enabled log dirty mode (XEN_DOMCTL_SHADOW_OP_OFF). This is due to lack of mutually exclusive locking between both operations and can lead to entries being added in already freed slots, resulting in a memory leak.

Affected products

• Debian Debian Linux: version 11.0 only
• Fedoraproject Fedora: version 34 only; version 35 only
• Xen Xen: from 4.0.0, before 4.12.0 (fixed in 4.12.0); from 4.13.0, before 4.14.0 (fixed in 4.14.0); from 4.15.0, before 4.16.0 (fixed in 4.16.0)

Published 2022-04-05. Last modified 2026-06-17.