CVE-2022-26363

x86 pv: Insufficient care with non-coherent mappings T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Xen maintains a type reference count for pages, in addition to a regular reference count. This scheme is used to maintain invariants required for Xen's safety, e.g. PV guests may not have direct writeable access to pagetables; updates need auditing by Xen. Unfortunately, Xen's safety logic doesn't account for CPU-induced cache non-coherency; cases where the CPU can cause the content of the cache to be different to the content in main memory. In such cases, Xen's safety logic can incorrectly conclude that the contents of a page is safe.

• http://www.openwall.com/lists/oss-security/2022/06/09/4Mailing List, Third Party Advisory
• http://xenbits.xen.org/xsa/advisory-402.htmlPatch, Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OH65U6FTTB5MLH5A6Q3TW7KVCGOG4MYI/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RKRXZ4LHGCGMOG24ZCEJNY6R2BTS4S2Q/
• https://security.gentoo.org/glsa/202208-23Third Party Advisory
• https://www.debian.org/security/2022/dsa-5184Third Party Advisory
• https://xenbits.xenproject.org/xsa/advisory-402.txtVendor Advisory
• http://www.openwall.com/lists/oss-security/2022/06/09/4Mailing List, Third Party Advisory
• http://xenbits.xen.org/xsa/advisory-402.htmlPatch, Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OH65U6FTTB5MLH5A6Q3TW7KVCGOG4MYI/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/RKRXZ4LHGCGMOG24ZCEJNY6R2BTS4S2Q/
• https://security.gentoo.org/glsa/202208-23Third Party Advisory
• https://www.debian.org/security/2022/dsa-5184Third Party Advisory
• https://xenbits.xenproject.org/xsa/advisory-402.txtVendor Advisory

Published

Jun 9, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-26358IOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues T[…7.8
• CVE-2022-26359IOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues T[…7.8
• CVE-2022-2636Improper Control of Generation of Code ('Code Injection') in…8.8
• CVE-2022-26360IOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues T[…7.8
• CVE-2022-26361IOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues T[…7.8
• CVE-2022-26362x86 pv: Race condition in typeref acquisition Xen maintains …6.4
• CVE-2022-26364x86 pv: Insufficient care with non-coherent mappings T[his C…6.7
• CVE-2022-26365Linux disk/nic frontends data leaks T[his CNA information re…7.1
• CVE-2022-26366Cross-Site Request Forgery (CSRF) in AdRotate Banner Manager…8.8
• CVE-2022-26367Improper buffer restrictions in some Intel(R) XMM(TM) 7560 M…8.2
• CVE-2022-26368Browse restriction bypass and operation restriction bypass v…5.4
• CVE-2022-26369Out-of-bounds read in some Intel(R) XMM(TM) 7560 Modem softw…8.1