MariaDB <10.9.2 compress_write Deadlock via data_mutex leak
CVE-2022-38791 Published on August 27, 2022

In MariaDB before 10.9.2, compress_write in extra/mariabackup/ds_compress.cc does not release data_mutex upon a stream write failure, which allows local users to trigger a deadlock.

Vendor Advisory Vendor Advisory Vendor Advisory NVD


Products Associated with CVE-2022-38791

stack.watch emails you whenever new vulnerabilities are published in MariaDB or Fedora Project Fedora. Just hit a watch button to start following.

MariaDB
 
Fedora Project Fedora
 

Exploit Probability

EPSS
0.04%
Percentile
10.19%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.