[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2022-26357":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-04T08:53:30.047Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":28,"aliases":29,"duplicate_of":9,"upstream":30,"downstream":31,"duplicates":58,"related":59,"reserved_at":9,"published_at":69,"modified_at":70,"state":71,"summary":72,"references_raw":80,"kevs":114,"epss":115,"epss_history":118,"metrics":369,"affected":380},"CVE-2022-26357","race in VT-d domain ID cleanup Xen domain IDs are up to 15 bits wide. VT-d hardware may allow for only less than 15 bits to hold a domain ID associating a physical device with a particular domain. Therefore internally Xen domain IDs are mapped to the smaller value range. The cleaning up of the housekeeping structures has a race, allowing for VT-d domain IDs to be leaked and flushes to be bypassed.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-362","Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')","The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.","weakness","Draft","Class","Medium",[20,24],{"id":21,"name":22,"techniques":23},"CAPEC-26","Leveraging Race Conditions",[],{"id":25,"name":26,"techniques":27},"CAPEC-29","Leveraging Time-of-Check and Time-of-Use (TOCTOU) Race Conditions",[],[],[],[],[32,34,36,38,40,42,44,46,48,50,52,54,56],{"_key":33},"ALPINE-CVE-2022-26357",{"_key":35},"SUSE-SU-2022:1285-1",{"_key":37},"SUSE-SU-2022:1300-1",{"_key":39},"SUSE-SU-2022:1359-1",{"_key":41},"SUSE-SU-2022:1375-1",{"_key":43},"SUSE-SU-2022:1408-1",{"_key":45},"SUSE-SU-2022:1505-1",{"_key":47},"SUSE-SU-2022:2158-1",{"_key":49},"SUSE-SU-2022:1506-1",{"_key":51},"OPENSUSE-SU-2024:11979-1",{"_key":53},"DSA-5117-1",{"_key":55},"DEBIAN-CVE-2022-26357",{"_key":57},"UBUNTU-CVE-2022-26357",[],[60,61,62,63,64,65,66,67,68],{"_key":35},{"_key":37},{"_key":39},{"_key":41},{"_key":43},{"_key":45},{"_key":47},{"_key":49},{"_key":51},"2022-04-05T00:00:00.000Z","2024-08-03T05:03:32.803Z","Modified",{"cisa_kev":73,"cisa_ransomware":73,"cisa_vendor":9,"epss_severity":74,"epss_score":75,"severity":76,"severity_score":4,"severity_version":77,"severity_source":78,"severity_vector":79,"severity_status":71},false,"low",0.00018,"high","v3.1","nvd","CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",[81,87,92,98,102,106,110],{"url":82,"sources":83,"tags":85},"https://xenbits.xenproject.org/xsa/advisory-399.txt",[84,78],"cve.org",[86],"Vendor Advisory",{"url":88,"sources":89,"tags":90},"http://xenbits.xen.org/xsa/advisory-399.html",[84,78],[91,86],"Patch",{"url":93,"sources":94,"tags":95},"http://www.openwall.com/lists/oss-security/2022/04/05/2",[84,78],[96,91,97],"Mailing List","Third Party Advisory",{"url":99,"sources":100,"tags":101},"https://www.debian.org/security/2022/dsa-5117",[84,78],[86,97],{"url":103,"sources":104,"tags":105},"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UHFSRVLM2JUCPDC2KGB7ETPQYJLCGBLD/",[84,78],[86],{"url":107,"sources":108,"tags":109},"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6ETPM2OVZZ6KOS2L7QO7SIW6XWT5OW3F/",[84,78],[86],{"url":111,"sources":112,"tags":113},"https://security.gentoo.org/glsa/202402-07",[84,78],[86],[],{"date":116,"score":75,"percentile":117},"2026-06-03",0.04794,[119,123,126,129,132,135,138,141,144,147,150,153,156,159,162,166,169,172,175,177,180,183,186,188,190,193,196,199,202,205,207,209,212,215,217,220,223,226,229,232,234,237,240,243,245,247,250,252,255,258,260,262,264,267,270,273,275,277,280,282,285,288,290,292,294,296,299,302,305,308,311,314,317,320,323,326,329,331,333,336,338,342,345,348,351,354,357,360,363,366],{"date":120,"score":121,"percentile":122},"2025-11-04",0.00013,0.01323,{"date":124,"score":121,"percentile":125},"2025-11-05",0.01344,{"date":127,"score":121,"percentile":128},"2025-11-06",0.01358,{"date":130,"score":121,"percentile":131},"2025-11-07",0.01363,{"date":133,"score":121,"percentile":134},"2025-11-08",0.01366,{"date":136,"score":121,"percentile":137},"2025-11-09",0.01365,{"date":139,"score":121,"percentile":140},"2025-11-10",0.01353,{"date":142,"score":121,"percentile":143},"2025-11-11",0.01364,{"date":145,"score":121,"percentile":146},"2025-11-12",0.01369,{"date":148,"score":121,"percentile":149},"2025-11-13",0.01382,{"date":151,"score":121,"percentile":152},"2025-11-14",0.0139,{"date":154,"score":121,"percentile":155},"2025-11-15",0.01409,{"date":157,"score":121,"percentile":158},"2025-11-16",0.01408,{"date":160,"score":121,"percentile":161},"2025-11-17",0.01396,{"date":163,"score":164,"percentile":165},"2025-11-18",0.00043,0.08501,{"date":167,"score":164,"percentile":168},"2025-11-19",0.08513,{"date":170,"score":164,"percentile":171},"2025-11-20",0.08545,{"date":173,"score":121,"percentile":174},"2025-11-21",0.01454,{"date":176,"score":121,"percentile":174},"2025-11-22",{"date":178,"score":121,"percentile":179},"2025-11-23",0.0144,{"date":181,"score":121,"percentile":182},"2025-11-24",0.01435,{"date":184,"score":121,"percentile":185},"2025-11-25",0.01421,{"date":187,"score":121,"percentile":143},"2025-11-26",{"date":189,"score":121,"percentile":131},"2025-11-27",{"date":191,"score":121,"percentile":192},"2025-11-28",0.01362,{"date":194,"score":121,"percentile":195},"2025-11-29",0.01401,{"date":197,"score":121,"percentile":198},"2025-11-30",0.01412,{"date":200,"score":121,"percentile":201},"2025-12-01",0.01436,{"date":203,"score":121,"percentile":204},"2025-12-02",0.0143,{"date":206,"score":121,"percentile":204},"2025-12-03",{"date":208,"score":121,"percentile":198},"2025-12-04",{"date":210,"score":121,"percentile":211},"2025-12-05",0.01422,{"date":213,"score":121,"percentile":214},"2025-12-06",0.01426,{"date":216,"score":121,"percentile":211},"2025-12-07",{"date":218,"score":121,"percentile":219},"2025-12-08",0.01423,{"date":221,"score":121,"percentile":222},"2025-12-09",0.01438,{"date":224,"score":121,"percentile":225},"2025-12-10",0.01448,{"date":227,"score":121,"percentile":228},"2025-12-11",0.01445,{"date":230,"score":121,"percentile":231},"2025-12-12",0.01447,{"date":233,"score":121,"percentile":201},"2025-12-13",{"date":235,"score":121,"percentile":236},"2025-12-14",0.01429,{"date":238,"score":121,"percentile":239},"2025-12-15",0.01425,{"date":241,"score":121,"percentile":242},"2025-12-16",0.01431,{"date":244,"score":121,"percentile":222},"2025-12-17",{"date":246,"score":121,"percentile":182},"2025-12-18",{"date":248,"score":121,"percentile":249},"2025-12-19",0.01439,{"date":251,"score":121,"percentile":249},"2025-12-20",{"date":253,"score":121,"percentile":254},"2025-12-21",0.0145,{"date":256,"score":121,"percentile":257},"2025-12-22",0.01452,{"date":259,"score":121,"percentile":254},"2025-12-23",{"date":261,"score":121,"percentile":254},"2025-12-24",{"date":263,"score":121,"percentile":174},"2025-12-25",{"date":265,"score":121,"percentile":266},"2025-12-26",0.01457,{"date":268,"score":121,"percentile":269},"2025-12-27",0.01451,{"date":271,"score":121,"percentile":272},"2025-12-28",0.01449,{"date":274,"score":121,"percentile":179},"2025-12-29",{"date":276,"score":121,"percentile":182},"2025-12-30",{"date":278,"score":121,"percentile":279},"2025-12-31",0.01432,{"date":281,"score":121,"percentile":254},"2026-01-01",{"date":283,"score":121,"percentile":284},"2026-01-02",0.01453,{"date":286,"score":121,"percentile":287},"2026-01-03",0.01456,{"date":289,"score":121,"percentile":242},"2026-01-04",{"date":291,"score":121,"percentile":249},"2026-01-05",{"date":293,"score":121,"percentile":242},"2026-01-06",{"date":295,"score":121,"percentile":179},"2026-01-07",{"date":297,"score":121,"percentile":298},"2026-01-08",0.01455,{"date":300,"score":121,"percentile":301},"2026-01-09",0.01469,{"date":303,"score":121,"percentile":304},"2026-01-10",0.01479,{"date":306,"score":121,"percentile":307},"2026-01-11",0.0148,{"date":309,"score":121,"percentile":310},"2026-01-12",0.01461,{"date":312,"score":121,"percentile":313},"2026-01-13",0.01459,{"date":315,"score":121,"percentile":316},"2026-01-14",0.01462,{"date":318,"score":121,"percentile":319},"2026-01-15",0.01474,{"date":321,"score":121,"percentile":322},"2026-01-16",0.01483,{"date":324,"score":121,"percentile":325},"2026-01-17",0.01488,{"date":327,"score":121,"percentile":328},"2026-01-18",0.01498,{"date":330,"score":121,"percentile":325},"2026-01-19",{"date":332,"score":121,"percentile":319},"2026-01-20",{"date":334,"score":121,"percentile":335},"2026-01-21",0.01467,{"date":337,"score":121,"percentile":335},"2026-01-22",{"date":339,"score":340,"percentile":341},"2026-01-23",0.0002,0.0445,{"date":343,"score":340,"percentile":344},"2026-01-24",0.04494,{"date":346,"score":340,"percentile":347},"2026-01-25",0.04489,{"date":349,"score":340,"percentile":350},"2026-01-26",0.04475,{"date":352,"score":340,"percentile":353},"2026-01-27",0.04465,{"date":355,"score":340,"percentile":356},"2026-01-28",0.04449,{"date":358,"score":340,"percentile":359},"2026-01-29",0.04466,{"date":361,"score":340,"percentile":362},"2026-01-30",0.04473,{"date":364,"score":340,"percentile":365},"2026-01-31",0.04451,{"date":367,"score":340,"percentile":368},"2026-02-01",0.04567,[370],{"source":78,"cvss_v2_0":371,"cvss_v3_0":9,"cvss_v3_1":376,"cvss_v4_0":9},{"baseScore":372,"baseSeverity":9,"vectorString":373,"impactScore":374,"exploitabilityScore":375},6.2,"AV:L/AC:H/Au:N/C:C/I:C/A:C",10,1.9,{"baseScore":4,"baseSeverity":377,"vectorString":79,"impactScore":378,"exploitabilityScore":379},"HIGH",9.8,2.6,[381,390,398],{"ecosystem":9,"name":382,"vendor":383,"product":384,"cpe_part":385,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":386},"debian linux","debian","debian_linux","o",[387],{"version":388,"is_range":73,"range_type":389,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"11.0","cpe",{"ecosystem":9,"name":391,"vendor":392,"product":391,"cpe_part":385,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":393},"fedora","fedoraproject",[394,396],{"version":395,"is_range":73,"range_type":389,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"34",{"version":397,"is_range":73,"range_type":389,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"35",{"ecosystem":9,"name":399,"vendor":399,"product":399,"cpe_part":385,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":400},"xen",[401,408],{"version":402,"is_range":403,"range_type":389,"version_start":404,"version_start_type":405,"version_end":406,"version_end_type":407,"fixed_in":9},"4.11.x",true,"4.11.0","including","4.12.0","excluding",{"version":409,"is_range":403,"range_type":389,"version_start":410,"version_start_type":405,"version_end":411,"version_end_type":407,"fixed_in":9},"gte4.13.0_lt4.16.0","4.13.0","4.16.0"]