CVE-2022-38791

Name of the Vulnerable Software and Affected Versions MariaDB versions prior to 10.9.2

Description The issue is caused by errors in resource locking in the ds compress.cc component of the MariaDB database management system. Exploitation of this issue can allow an attacker to cause a denial of service. Local users can trigger a deadlock when compress write in extra/mariabackup/ds compress.cc fails to release data mutex upon a stream write failure.

Recommendations For versions prior to 10.9.2, update to version 10.9.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the compress write function in ds compress.cc to minimize the risk of exploitation. Avoid using the data mutex variable in the affected compress write function until the issue is resolved.