CVE-2022-42329

07.12.2022, 01:15

Guests can trigger deadlock in Linux netback driver T[his CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE.] The patch for XSA-392 introduced another issue which might result in a deadlock when trying to free the SKB of a packet dropped due to the XSA-392 handling (CVE-2022-42328). Additionally when dropping packages for other reasons the same deadlock could occur in case of netpoll being active for the interface the xen-netback driver is connected to (CVE-2022-42329).

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	5.5 MEDIUM	LOCAL	LOW	LOW	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
XEN	CNA	---				---
CVE	ADP	---				---
CISA-ADP	ADP	5.5 MEDIUM	LOCAL	LOW	LOW	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Base Score

CVSS 3.x

EPSS Score

Percentile: 1%

Vendor	Product	Version
linux	linux_kernel	𝑥 < 6.0
debian	debian_linux	10.0

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

linux

bullseye	5.10.223-1 fixed
bullseye (security)	5.10.226-1 fixed
bookworm	6.1.106-3 fixed
bookworm (security)	6.1.112-1 fixed
sid	6.11.5-1 fixed
trixie	6.11.5-1 fixed

Ubuntu Releases

Ubuntu Product

Codename

linux

noble	not-affected
mantic	not-affected
lunar	not-affected
kinetic	Fixed 5.19.0-38.39 released
jammy	Fixed 5.15.0-67.74 released
focal	Fixed 5.4.0-144.161 released
bionic	Fixed 4.15.0-206.217 released
xenial	not-affected
trusty	not-affected

linux-allwinner

noble	dne
mantic	dne
lunar	not-affected
kinetic	not-affected
jammy	dne
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-allwinner-5.19

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-aws

noble	not-affected
mantic	not-affected
lunar	Fixed 6.2.0-1002.2 released
kinetic	Fixed 5.19.0-1022.23 released
jammy	Fixed 5.15.0-1031.35 released
focal	Fixed 5.4.0-1097.105 released
bionic	Fixed 4.15.0-1151.164 released
xenial	not-affected
trusty	not-affected

linux-aws-5.0

kinetic	dne
jammy	dne
focal	dne
bionic	ignored
xenial	dne
trusty	dne

linux-aws-5.11

kinetic	dne
jammy	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-aws-5.13

kinetic	dne
jammy	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-aws-5.15

kinetic	dne
jammy	dne
focal	Fixed 5.15.0-1031.35~20.04.1 released
bionic	dne
xenial	dne
trusty	dne

linux-aws-5.19

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-aws-5.3

kinetic	dne
jammy	dne
focal	dne
bionic	ignored
xenial	dne
trusty	dne

linux-aws-5.4

kinetic	dne
jammy	dne
focal	dne
bionic	Fixed 5.4.0-1097.105~18.04.1 released
xenial	dne
trusty	dne

linux-aws-5.8

kinetic	dne
jammy	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-aws-6.2

noble	dne
mantic	dne
lunar	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-aws-6.5

noble	dne
mantic	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-aws-fips

noble	dne
mantic	dne
jammy	dne
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-aws-hwe

kinetic	dne
jammy	dne
focal	dne
bionic	dne
xenial	Fixed 4.15.0-1151.164~16.04.1 released
trusty	dne

linux-azure

noble	not-affected
mantic	not-affected
lunar	Fixed 6.2.0-1002.2 released
kinetic	Fixed 5.19.0-1022.23 released
jammy	Fixed 5.15.0-1034.41 released
focal	Fixed 5.4.0-1104.110 released
bionic	ignored
xenial	Fixed 4.15.0-1162.177~16.04.1 released
trusty	Fixed 4.15.0-1162.177~14.04.1 released

linux-azure-4.15

kinetic	dne
jammy	dne
focal	dne
bionic	Fixed 4.15.0-1162.177 released
xenial	dne
trusty	dne

linux-azure-5.11

kinetic	dne
jammy	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-azure-5.13

kinetic	dne
jammy	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-azure-5.15

kinetic	dne
jammy	dne
focal	Fixed 5.15.0-1034.41~20.04.1 released
bionic	dne
xenial	dne
trusty	dne

linux-azure-5.19

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	Fixed 5.19.0-1022.23~22.04.1 released
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-azure-5.3

kinetic	dne
jammy	dne
focal	dne
bionic	ignored
xenial	dne
trusty	dne

linux-azure-5.4

kinetic	dne
jammy	dne
focal	dne
bionic	Fixed 5.4.0-1104.110~18.04.1 released
xenial	dne
trusty	dne

linux-azure-5.8

kinetic	dne
jammy	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-azure-6.2

noble	dne
mantic	dne
lunar	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-azure-6.5

noble	dne
mantic	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-azure-edge

kinetic	dne
jammy	dne
focal	dne
bionic	ignored
xenial	dne
trusty	dne

linux-azure-fde

kinetic	dne
jammy	Fixed 5.15.0-1034.41.1 released
focal	Fixed 5.4.0-1104.110 released
bionic	dne
xenial	dne
trusty	dne

linux-azure-fde-5.15

kinetic	dne
jammy	dne
focal	Fixed 5.15.0-1034.41~20.04.1.2 released
bionic	dne
xenial	dne
trusty	dne

linux-azure-fde-5.19

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-azure-fde-6.2

noble	dne
mantic	dne
lunar	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-azure-fips

noble	dne
mantic	dne
jammy	dne
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-bluefield

kinetic	dne
jammy	dne
focal	Fixed 5.4.0-1059.65 released
bionic	dne
xenial	dne
trusty	dne

linux-dell300x

kinetic	dne
jammy	dne
focal	dne
bionic	Fixed 4.15.0-1061.66 released
xenial	dne
trusty	dne

linux-fips

kinetic	dne
jammy	dne
focal	dne
bionic	dne
xenial	ignored
trusty	ignored

linux-gcp

noble	not-affected
mantic	not-affected
lunar	Fixed 6.2.0-1004.4 released
kinetic	Fixed 5.19.0-1019.21 released
jammy	Fixed 5.15.0-1030.37 released
focal	Fixed 5.4.0-1101.110 released
bionic	ignored
xenial	Fixed 4.15.0-1146.162~16.04.1 released
trusty	dne

linux-gcp-4.15

kinetic	dne
jammy	dne
focal	dne
bionic	Fixed 4.15.0-1146.162 released
xenial	dne
trusty	dne

linux-gcp-5.11

kinetic	dne
jammy	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-gcp-5.13

kinetic	dne
jammy	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-gcp-5.15

kinetic	dne
jammy	dne
focal	Fixed 5.15.0-1030.37~20.04.1 released
bionic	dne
xenial	dne
trusty	dne

linux-gcp-5.19

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-gcp-5.3

kinetic	dne
jammy	dne
focal	dne
bionic	ignored
xenial	dne
trusty	dne

linux-gcp-5.4

kinetic	dne
jammy	dne
focal	dne
bionic	Fixed 5.4.0-1101.110~18.04.1 released
xenial	dne
trusty	dne

linux-gcp-5.8

kinetic	dne
jammy	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-gcp-6.2

noble	dne
mantic	dne
lunar	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-gcp-6.5

noble	dne
mantic	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-gcp-fips

noble	dne
mantic	dne
jammy	dne
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-gke

noble	not-affected
kinetic	dne
jammy	Fixed 5.15.0-1028.33 released
focal	Fixed 5.4.0-1095.102 released
bionic	dne
xenial	ignored
trusty	dne

linux-gke-4.15

kinetic	dne
jammy	dne
focal	dne
bionic	ignored
xenial	dne
trusty	dne

linux-gke-5.0

kinetic	dne
jammy	dne
focal	dne
bionic	ignored
xenial	dne
trusty	dne

linux-gke-5.15

kinetic	dne
jammy	dne
focal	Fixed 5.15.0-1028.33~20.04.1 released
bionic	dne
xenial	dne
trusty	dne

linux-gke-5.3

kinetic	dne
jammy	dne
focal	dne
bionic	ignored
xenial	dne
trusty	dne

linux-gke-5.4

kinetic	dne
jammy	dne
focal	dne
bionic	ignored
xenial	dne
trusty	dne

linux-gkeop

kinetic	dne
jammy	Fixed 5.15.0-1016.21 released
focal	Fixed 5.4.0-1065.69 released
bionic	dne
xenial	dne
trusty	dne

linux-gkeop-5.15

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
focal	Fixed 5.15.0-1016.21~20.04.1 released
bionic	dne
xenial	dne
trusty	dne

linux-gkeop-5.4

kinetic	dne
jammy	dne
focal	dne
bionic	ignored
xenial	dne
trusty	dne

linux-hwe

kinetic	dne
jammy	dne
focal	dne
bionic	ignored
xenial	Fixed 4.15.0-206.217~16.04.1 released
trusty	dne

linux-hwe-5.11

kinetic	dne
jammy	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-hwe-5.13

kinetic	dne
jammy	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-hwe-5.15

kinetic	dne
jammy	dne
focal	Fixed 5.15.0-67.74~20.04.1 released
bionic	dne
xenial	dne
trusty	dne

linux-hwe-5.19

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	Fixed 5.19.0-38.39~22.04.1 released
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-hwe-5.4

kinetic	dne
jammy	dne
focal	dne
bionic	Fixed 5.4.0-144.161~18.04.1 released
xenial	dne
trusty	dne

linux-hwe-5.8

kinetic	dne
jammy	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-hwe-6.2

noble	dne
mantic	dne
lunar	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-hwe-6.5

noble	dne
mantic	dne
lunar	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-hwe-6.8

noble	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-hwe-edge

kinetic	dne
jammy	dne
focal	dne
bionic	ignored
xenial	ignored
trusty	dne

linux-ibm

noble	not-affected
mantic	not-affected
lunar	ignored
kinetic	Fixed 5.19.0-1019.21 released
jammy	Fixed 5.15.0-1026.29 released
focal	Fixed 5.4.0-1045.50 released
bionic	dne
xenial	dne
trusty	dne

linux-ibm-5.15

noble	dne
mantic	dne
lunar	dne
jammy	dne
focal	not-affected
bionic	dne
xenial	dne
trusty	dne

linux-ibm-5.4

kinetic	dne
jammy	dne
focal	dne
bionic	Fixed 5.4.0-1045.50~18.04.1 released
xenial	dne
trusty	dne

linux-intel

noble	not-affected
mantic	dne
jammy	dne
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-intel-5.13

kinetic	dne
jammy	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-intel-iot-realtime

noble	dne
jammy	dne
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-intel-iotg

kinetic	dne
jammy	Fixed 5.15.0-1026.31 released
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-intel-iotg-5.15

kinetic	dne
jammy	dne
focal	Fixed 5.15.0-1026.31~20.04.1 released
bionic	dne
xenial	dne
trusty	dne

linux-iot

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
focal	Fixed 5.4.0-1013.15 released
bionic	dne
xenial	dne
trusty	dne

linux-kvm

noble	dne
mantic	dne
lunar	Fixed 6.2.0-1002.2 released
kinetic	Fixed 5.19.0-1020.21 released
jammy	Fixed 5.15.0-1029.34 released
focal	Fixed 5.4.0-1087.93 released
bionic	Fixed 4.15.0-1136.141 released
xenial	not-affected
trusty	dne

linux-laptop

noble	dne
mantic	not-affected
lunar	dne
jammy	dne
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-lowlatency

noble	not-affected
mantic	not-affected
lunar	Fixed 6.2.0-1002.2 released
kinetic	Fixed 5.19.0-1021.22 released
jammy	Fixed 5.15.0-67.74 released
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-lowlatency-hwe-5.15

kinetic	dne
jammy	dne
focal	Fixed 5.15.0-67.74~20.04.1 released
bionic	dne
xenial	dne
trusty	dne

linux-lowlatency-hwe-5.19

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	Fixed 5.19.0-1021.22~22.04.1 released
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-lowlatency-hwe-6.2

noble	dne
mantic	dne
lunar	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-lowlatency-hwe-6.5

noble	dne
mantic	dne
lunar	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-lowlatency-hwe-6.8

noble	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-lts-xenial

kinetic	dne
jammy	dne
focal	dne
bionic	dne
xenial	dne
trusty	not-affected

linux-nvidia

noble	not-affected
mantic	dne
lunar	dne
kinetic	dne
jammy	Fixed 5.15.0-1023.23 released
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-nvidia-6.2

noble	dne
mantic	dne
lunar	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-nvidia-6.5

noble	dne
mantic	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-nvidia-6.8

noble	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-nvidia-lowlatency

noble	not-affected
jammy	dne
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-oem

kinetic	dne
jammy	dne
focal	dne
bionic	ignored
xenial	ignored
trusty	dne

linux-oem-5.10

kinetic	dne
jammy	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-oem-5.13

kinetic	dne
jammy	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-oem-5.14

kinetic	dne
jammy	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-oem-5.17

noble	dne
mantic	dne
lunar	dne
kinetic	ignored
jammy	ignored
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-oem-5.6

kinetic	dne
jammy	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-oem-6.0

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	ignored
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-oem-6.1

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-oem-6.5

noble	dne
mantic	dne
lunar	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-oem-6.8

noble	not-affected
mantic	dne
jammy	dne
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-oem-osp1

kinetic	dne
jammy	dne
focal	dne
bionic	ignored
xenial	dne
trusty	dne

linux-oracle

noble	not-affected
mantic	not-affected
lunar	Fixed 6.2.0-1002.2 released
kinetic	Fixed 5.19.0-1019.22 released
jammy	Fixed 5.15.0-1030.36 released
focal	Fixed 5.4.0-1094.103 released
bionic	Fixed 4.15.0-1115.126 released
xenial	Fixed 4.15.0-1115.126~16.04.1 released
trusty	dne

linux-oracle-5.0

kinetic	dne
jammy	dne
focal	dne
bionic	ignored
xenial	dne
trusty	dne

linux-oracle-5.11

kinetic	dne
jammy	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-oracle-5.13

kinetic	dne
jammy	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-oracle-5.15

kinetic	dne
jammy	dne
focal	Fixed 5.15.0-1030.36~20.04.1 released
bionic	dne
xenial	dne
trusty	dne

linux-oracle-5.3

kinetic	dne
jammy	dne
focal	dne
bionic	ignored
xenial	dne
trusty	dne

linux-oracle-5.4

kinetic	dne
jammy	dne
focal	dne
bionic	Fixed 5.4.0-1094.103~18.04.1 released
xenial	dne
trusty	dne

linux-oracle-5.8

kinetic	dne
jammy	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-oracle-6.5

noble	dne
mantic	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-raspi

noble	not-affected
mantic	not-affected
lunar	Fixed 6.2.0-1003.3 released
kinetic	Fixed 5.19.0-1015.22 released
jammy	Fixed 5.15.0-1025.27 released
focal	Fixed 5.4.0-1081.92 released
bionic	dne
xenial	dne
trusty	dne

linux-raspi-5.4

kinetic	dne
jammy	dne
focal	dne
bionic	Fixed 5.4.0-1081.92~18.04.1 released
xenial	dne
trusty	dne

linux-raspi-realtime

noble	dne
jammy	dne
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-raspi2

kinetic	dne
jammy	dne
focal	ignored
bionic	Fixed 4.15.0-1128.136 released
xenial	ignored
trusty	dne

linux-raspi2-5.3

kinetic	dne
jammy	dne
focal	dne
bionic	ignored
xenial	dne
trusty	dne

linux-realtime

noble	dne
jammy	ignored
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-riscv

noble	not-affected
mantic	not-affected
lunar	ignored
kinetic	Fixed 5.19.0-1015.16 released
jammy	ignored
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-riscv-5.11

kinetic	dne
jammy	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-riscv-5.15

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	dne
focal	Fixed 5.15.0-1030.34~20.04.1 released
bionic	dne
xenial	dne
trusty	dne

linux-riscv-5.19

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-riscv-5.8

kinetic	dne
jammy	dne
focal	ignored
bionic	dne
xenial	dne
trusty	dne

linux-riscv-6.5

noble	dne
mantic	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-riscv-6.8

noble	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-snapdragon

kinetic	dne
jammy	dne
focal	dne
bionic	Fixed 4.15.0-1146.156 released
xenial	ignored
trusty	dne

linux-starfive

noble	dne
mantic	not-affected
lunar	not-affected
kinetic	not-affected
jammy	dne
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-starfive-5.19

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-starfive-6.2

noble	dne
mantic	dne
lunar	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-starfive-6.5

noble	dne
mantic	dne
jammy	not-affected
focal	dne
bionic	dne
xenial	dne
trusty	dne

linux-xilinx-zynqmp

noble	dne
mantic	dne
lunar	dne
kinetic	dne
jammy	not-affected
focal	Fixed 5.4.0-1022.26 released
bionic	dne
xenial	dne
trusty	dne

Common Weakness Enumeration

CWE-667 - Improper Locking
The software does not properly acquire or release a lock on a resource, leading to unexpected resource state changes and behaviors.

References

http://www.openwall.com/lists/oss-security/2022/12/08/2

http://www.openwall.com/lists/oss-security/2022/12/08/3

http://www.openwall.com/lists/oss-security/2022/12/09/2

https://lists.debian.org/debian-lts-announce/2022/12/msg00031.html