CVE-2022-42322

Name of the Vulnerable Software and Affected Versions Xenstore (affected versions not specified)

Description The issue allows cooperating guests to create an arbitrary number of Xenstore nodes. This is possible when one guest lets another write into its local Xenstore tree, creating many nodes and then rebooting. The nodes created will be owned by Dom0, which has no limit on the number of nodes it can own due to Xenstore quota. This can lead to a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.