CVE-2022-26358

IOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Certain PCI devices in a system might be assigned Reserved Memory Regions (specified via Reserved Memory Region Reporting, "RMRR") for Intel VT-d or Unity Mapping ranges for AMD-Vi. These are typically used for platform tasks such as legacy USB emulation. Since the precise purpose of these regions is unknown, once a device associated with such a region is active, the mappings of these regions need to remain continuouly accessible by the device. This requirement has been violated. Subsequent DMA or interrupts from the device may have unpredictable behaviour, ranging from IOMMU faults to memory corruption.

• http://www.openwall.com/lists/oss-security/2022/04/05/3Mailing List, Patch, Third Party Advisory
• http://xenbits.xen.org/xsa/advisory-400.htmlPatch, Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6ETPM2OVZZ6KOS2L7QO7SIW6XWT5OW3F/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UHFSRVLM2JUCPDC2KGB7ETPQYJLCGBLD/
• https://security.gentoo.org/glsa/202402-07
• https://www.debian.org/security/2022/dsa-5117Third Party Advisory
• https://xenbits.xenproject.org/xsa/advisory-400.txtVendor Advisory
• http://www.openwall.com/lists/oss-security/2022/04/05/3Mailing List, Patch, Third Party Advisory
• http://xenbits.xen.org/xsa/advisory-400.htmlPatch, Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6ETPM2OVZZ6KOS2L7QO7SIW6XWT5OW3F/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UHFSRVLM2JUCPDC2KGB7ETPQYJLCGBLD/
• https://security.gentoo.org/glsa/202402-07
• https://www.debian.org/security/2022/dsa-5117Third Party Advisory
• https://xenbits.xenproject.org/xsa/advisory-400.txtVendor Advisory

Published

Apr 5, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-26352An issue was discovered in the ContentResource API in dotCMS…9.8
• CVE-2022-26353A flaw was found in the virtio-net device of QEMU. This flaw…7.5
• CVE-2022-26354A flaw was found in the vhost-vsock device of QEMU. In case …3.2
• CVE-2022-26355Citrix Federated Authentication Service (FAS) 7.17 - 10.6 ca…4.4
• CVE-2022-26356Racy interactions between dirty vram tracking and paging log…5.6
• CVE-2022-26357race in VT-d domain ID cleanup Xen domain IDs are up to 15 b…7
• CVE-2022-26359IOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues T[…7.8
• CVE-2022-2636Improper Control of Generation of Code ('Code Injection') in…8.8
• CVE-2022-26360IOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues T[…7.8
• CVE-2022-26361IOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues T[…7.8
• CVE-2022-26362x86 pv: Race condition in typeref acquisition Xen maintains …6.4
• CVE-2022-26363x86 pv: Insufficient care with non-coherent mappings T[his C…6.7