CVE-2022-42322: Medium severity XEN Xen vulnerability
Xenstore: Cooperating guests can create arbitrary numbers of nodes T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] Since the fix of XSA-322 any Xenstore node owned by a removed domain will be modified to be owned by Dom0. This will allow two malicious guests working together to create an arbitrary number of Xenstore nodes. This is possible by domain A letting domain B write into domain A's local Xenstore tree. Domain B can then create many nodes and reboot. The nodes created by domain B will now be owned by Dom0. By repeating this process over and over again an arbitrary number of nodes can be created, as Dom0's number of nodes isn't limited by Xenstore quota.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/xento a version that resolves this vulnerability.Fixed in 4.14.6-1Fixed in 4.14.5+94-ge49571868d-1Fixed in 4.17.1+2-gb773c48e36-1Fixed in 4.17.2+55-g0b56bed864-1 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Patch XSA-322
Event History
Frequently Asked Questions
What is CVE-2022-42322?
CVE-2022-42322 is a vulnerability in Xenstore that allows cooperating guests to create arbitrary numbers of nodes.
What is the severity of CVE-2022-42322?
The severity of CVE-2022-42322 is medium with a severity value of 5.5.
How does CVE-2022-42322 affect Xen Xen?
For Xen Xen, the affected version is up to and including 4.11.4+107-gef32c7afa2-1.
How does CVE-2022-42322 affect Debian Debian Linux?
For Debian Debian Linux, the affected version is 11.0.
How does CVE-2022-42322 affect Fedora?
For Fedora, the affected versions are 35, 36, and 37.
How can I fix CVE-2022-42322?
To fix CVE-2022-42322, apply the recommended patches provided by the vendor.