[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2022-26357":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":24,"cwes":25,"cpes":27,"technologies":32,"references":36,"score":44,"epss_score":45,"epss_percentile":46,"is_kev":24,"cisa_kev_date_added":47,"cisa_kev_due_date":47,"cisa_ssvc":48,"attack_mappings":54,"exploits":61},316617,"CVE-2022-26357","EUVD-2022-30916","race in VT-d domain ID cleanup Xen domain IDs are up to 15 bits wide. VT-d hardware may allow for only less than 15 bits to hold a domain ID associating a physical device with a particular domain. Therefore internally Xen domain IDs are mapped to the smaller value range. The cleaning up of the housekeeping structures has a race, allowing for VT-d domain IDs to be leaked and flushes to be bypassed.","2022-04-05T13:15:00Z",{"cvss_v2.0":10,"cvss_v3.1":18},{"version":11,"baseScore":12,"accessVector":13,"vectorString":14,"authentication":15,"integrityImpact":16,"accessComplexity":17,"availabilityImpact":16,"confidentialityImpact":16},"2.0",6.2,"LOCAL","AV:L\u002FAC:H\u002FAu:N\u002FC:C\u002FI:C\u002FA:C","NONE","COMPLETE","HIGH",{"scope":19,"version":20,"baseScore":21,"attackVector":13,"baseSeverity":17,"vectorString":22,"integrityImpact":17,"userInteraction":15,"attackComplexity":17,"availabilityImpact":17,"privilegesRequired":23,"confidentialityImpact":17},"UNCHANGED","3.1",7,"CVSS:3.1\u002FAV:L\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H","LOW",false,[26],"CWE-362",[28,29,30,31],"cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*","cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*","cpe:2.3:o:xen:xen:*:*:*:*:*:*:*:*","cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*",[33,34,35],"Xen Xen","Fedoraproject Fedora","Debian Debian Linux",[37,38,39,40,41,42,43],"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2022\u002F04\u002F05\u002F2","http:\u002F\u002Fxenbits.xen.org\u002Fxsa\u002Fadvisory-399.html","https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002F6ETPM2OVZZ6KOS2L7QO7SIW6XWT5OW3F\u002F","https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FUHFSRVLM2JUCPDC2KGB7ETPQYJLCGBLD\u002F","https:\u002F\u002Fsecurity.gentoo.org\u002Fglsa\u002F202402-07","https:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2022\u002Fdsa-5117","https:\u002F\u002Fxenbits.xenproject.org\u002Fxsa\u002Fadvisory-399.txt",0.35,0.00258,0.17303,null,{"timestamp":47,"automatable":49,"tech_impact":50,"exploitation":51,"cisa_decision":52,"cisa_remediation_timeline":53},"no","partial","none",{},"FSU",[55],{"name":56,"source":57,"tactics":58,"technique_id":60},"Exploitation for Privilege Escalation","attack_vector",[59],"privilege-escalation","T1068",[]]