CVE-2022-42326

Name of the Vulnerable Software and Affected Versions Xenstore (affected versions not specified)

Description The issue is related to errors in memory release due to the creation of an arbitrary number of nodes via transactions. This can enable a malicious guest to create an arbitrary number of nodes, potentially leading to a denial of service. When a node is created in a transaction and later deleted in the same transaction, the transaction will be terminated with an error. This error occurs only when handling the deleted node at transaction finalization, resulting in the transaction being performed partially without updating the accounting information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.