CVE-2022-42330 | Vulnetix

CVE-2022-42330 PUBLISHED

Reported by xen · Published January 26, 2023

Guests can cause Xenstore crash via soft reset When a guest issues a "Soft Reset" (e.g. for performing a kexec) the libxl based Xen toolstack will normally perform a XS_RELEASE Xenstore operation. Due to a bug in xenstored this can result in a crash of xenstored. Any other use of XS_RELEASE will have the same impact.

Affected products

Vendor	Product	Versions
Xen	xen	consult Xen advisory XSA-425
Xen	xen	*

Timeline

Jan 25, 2023 CVE Published
Jan 26, 2023 EPSS Score (30 in total, the first dated here)
Aug 3, 2024 CVE Updated
Mar 10, 2026 Security Advisory (2 in total, the first dated here)
Jun 15, 2026 Coalition ESS Score

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln CVE-2022-42330
vulnetix vdb fixes CVE-2022-42330

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/CVE-2022-42330/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

GLSA-202402-07 vendor-advisory
http://xenbits.xen.org/xsa/advisory-425.html url

Look up in the Resolve Platform →