Patchwire CVEs, their patch status, and feeds to follow them

CVE-2022-42330

Fixed in a distro release EPSS 1%

Guests can cause Xenstore crash via soft reset When a guest issues a "Soft Reset" (e.g. for performing a kexec) the libxl based Xen toolstack will normally perform a XS_RELEASE Xenstore operation. Due to a bug in xenstored this can result in a crash of xenstored. Any other use of XS_RELEASE will have the same impact.

Published 2023-01-26 · CVE record · OSV

Products: xen

Distro releases

ReleasePackageFixed in
Alpine 3.18xen4.17.0-r2
Alpine 3.19xen4.17.0-r2
Alpine 3.20xen4.17.0-r2
Alpine 3.21xen4.17.0-r2
Alpine 3.22xen4.17.0-r2
Alpine 3.23xen4.17.0-r2
Alpine 3.24xen4.17.0-r2
Debian 12xen4.17.0+24-g2f8851c37f-2
Debian 13xen4.17.0+24-g2f8851c37f-2
Debian 14xen4.17.0+24-g2f8851c37f-2
Ubuntu 16.04 LTSxenno fix
Ubuntu 18.04 LTSxenno fix
Ubuntu 20.04 LTSxenno fix
Ubuntu 22.04 LTSxenno fix
Ubuntu 24.04 LTSxenno fix
Ubuntu 25.10xenno fix
Ubuntu 26.04 LTSxenno fix
Ubuntu 26.10xenno fix
openSUSE Tumbleweedxen4.17.0_04-1.1