CVE-2022-42326

Name	CVE-2022-42326
Description	Xenstore: Guests can create arbitrary number of nodes via transactions T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] In case a node has been created in a transaction and it is later deleted in the same transaction, the transaction will be terminated with an error. As this error is encountered only when handling the deleted node at transaction finalization, the transaction will have been performed partially and without updating the accounting information. This will enable a malicious guest to create arbitrary number of nodes.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
References	DSA-5272-1

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
xen (PTS)	jessie, jessie (lts)	4.4.4lts5-0+deb8u1	vulnerable
	stretch (security), stretch (lts), stretch	4.8.5.final+shim4.10.4-1+deb9u12	vulnerable
	buster (security), buster, buster (lts)	4.11.4+107-gef32c7afa2-1	vulnerable
	bullseye	4.14.6-1	fixed
	bullseye (security)	4.14.5+94-ge49571868d-1	fixed
	bookworm	4.17.3+10-g091466ba55-1~deb12u1	fixed
	sid, trixie	4.17.3+36-g54dacb5c02-1	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin
xen	source	jessie	(unfixed)	end-of-life
xen	source	stretch	(unfixed)	end-of-life
xen	source	buster	(unfixed)	end-of-life
xen	source	bullseye	4.14.5+86-g1c354767d5-1		DSA-5272-1
xen	source	(unstable)	4.16.2+90-g0d39a6d1ae-1

[buster] - xen <end-of-life> (DSA 4677-1)
https://xenbits.xen.org/xsa/advisory-421.html