What’s Vulnerable › Vulnerabilities

CVE-2022-42330

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-01-26 · updated 2026-06-17

Description

Guests can cause Xenstore crash via soft reset When a guest issues a "Soft Reset" (e.g. for performing a kexec) the libxl based Xen toolstack will normally perform a XS_RELEASE Xenstore operation. Due to a bug in xenstored this can result in a crash of xenstored. Any other use of XS_RELEASE will have the same impact.

Affected products

• xen: 4.17.0

References

• https://security.gentoo.org/glsa/202402-07
• https://xenbits.xenproject.org/xsa/advisory-425.txt
• http://xenbits.xen.org/xsa/advisory-425.html
• https://security.gentoo.org/glsa/202402-07
• https://xenbits.xenproject.org/xsa/advisory-425.txt

Get alerted when CVE-2022-42330 or the next vulnerability affects your stack