Xenstore XS_RELEASE Crash via Guest Soft Reset
CVE-2022-42330 Published on January 26, 2023

Guests can cause Xenstore crash via soft reset When a guest issues a "Soft Reset" (e.g. for performing a kexec) the libxl based Xen toolstack will normally perform a XS_RELEASE Xenstore operation. Due to a bug in xenstored this can result in a crash of xenstored. Any other use of XS_RELEASE will have the same impact.

Vendor Advisory NVD


Products Associated with CVE-2022-42330

Want to know whenever a new CVE is published for Citrix Xen Xen? stack.watch will email you.

 

Affected Versions

xen Version consult Xen advisory XSA-425 is unknown by CVE-2022-42330

Exploit Probability

EPSS
0.29%
Percentile
52.59%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.