CVE-2022-42329

MediumCVSS 5.5/10Last modified Oct 14, 2026

Description

Guests can trigger deadlock in Linux netback driver T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] The patch for XSA-392 introduced another issue which might result in a deadlock when trying to free the SKB of a packet dropped due to the XSA-392 handling (CVE-2022-42328). Additionally when dropping packages for other reasons the same deadlock could occur in case of netpoll being active for the interface the xen-netback driver is connected to (CVE-2022-42329).

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-667

Affected software

Vendor	Product	Versions
Linux	Linux	—
Siemens	SIMATIC S7-1500 TM MFP - GNU/Linux subsystem	< V1.1

References

http://www.openwall.com/lists/oss-security/2022/12/08/2Mailing List, Patch, Third Party Advisory
http://www.openwall.com/lists/oss-security/2022/12/08/3Mailing List, Patch, Third Party Advisory
http://www.openwall.com/lists/oss-security/2022/12/09/2Mailing List, Patch, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2022/12/msg00031.htmlMailing List, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2022/12/msg00034.htmlMailing List, Third Party Advisory
https://xenbits.xenproject.org/xsa/advisory-424.txtVendor Advisory
http://www.openwall.com/lists/oss-security/2022/12/08/2Mailing List, Patch, Third Party Advisory
http://www.openwall.com/lists/oss-security/2022/12/08/3Mailing List, Patch, Third Party Advisory
http://www.openwall.com/lists/oss-security/2022/12/09/2Mailing List, Patch, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2022/12/msg00031.htmlMailing List, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2022/12/msg00034.htmlMailing List, Third Party Advisory
https://xenbits.xenproject.org/xsa/advisory-424.txtVendor Advisory
https://cert-portal.siemens.com/productcert/html/ssa-625862.html
https://cert-portal.siemens.com/productcert/html/ssa-794697.html

Timeline

Published: Dec 7, 2022
Last modified: Oct 14, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-42336.1A vulnerability has been found in SourceCodester Event Registration System 1.0 and classified as problematic. Affected by this vulnerability CVE-2022-423307.5Guests can cause Xenstore crash via soft reset When a guest issues a "Soft Reset" (e.g. for performing a kexec) the libxl based Xen toolstac CVE-2022-423315.5x86: speculative vulnerability in 32bit SYSCALL path Due to an oversight in the very original Spectre/Meltdown security work (XSA-254), one CVE-2022-423327.8x86 shadow plus log-dirty mode use-after-free In environments where host assisted address translation is necessary but Hardware Assisted Pag CVE-2022-423338.6x86/HVM pinned cache attributes mis-handling T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerab CVE-2022-423346.5x86/HVM pinned cache attributes mis-handling T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerab CVE-2022-423357.8x86 shadow paging arbitrary pointer dereference In environments where host assisted address translation is necessary but Hardware Assisted P CVE-2022-423363.3Mishandling of guest SSBD selection on AMD hardware The current logic to set SSBD on AMD Family 17h and Hygon Family 18h processors requires CVE-2022-423397.8Adobe Acrobat Reader versions 22.002.20212 (and earlier) and 20.005.30381 (and earlier) are affected by a Stack-based Buffer Overflow vulner CVE-2022-42346.1A vulnerability was found in SourceCodester Canteen Management System. It has been rated as problematic. This issue affects the function bui CVE-2022-423407.5Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by an Improper Input Validation vulnerability that CVE-2022-423417.5Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by an Improper Restriction of XML External Entity