Non notée
CVE-2022-42328 Guests can trigger deadlock in Linux netback driver T[his CNA information record relates to multiple CVEs; the text…
Description
Guests can trigger deadlock in Linux netback driver T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] The patch for XSA-392 introduced another issue which might result in a deadlock when trying to free the SKB of a packet dropped due to the XSA-392 handling (CVE-2022-42328). Additionally when dropping packages for other reasons the same deadlock could occur in case of netpoll being active for the interface the xen-netback driver is connected to (CVE-2022-42329).
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Linux | Versions non publiées | |
| SIMATIC S7-1500 TM MFP - GNU/Linux subsystem 1.1 | premières → < 1.1 | 1.1 |
Autres CVE de Linux
Les 18286 CVE de Linux →
CVE-2026-100082
xen-blkback: Avoid UAF when reading I/O statistics
Non notée
CVE-2026-100081
xen-netback: defer xenvif_mcast_addr_list_free()
Non notée
CVE-2026-100080
xen-netback: Fix UAF when reading statistics data
Non notée
CVE-2026-99270
tcp: Fix potential UAF in reqsk_timer_handler().
8.1
Élevée