CVE-2022-42320

Xenstore: Guests can get access to Xenstore nodes of deleted domains Access rights of Xenstore nodes are per domid. When a domain is gone, there might be Xenstore nodes left with access rights containing the domid of the removed domain. This is normally no problem, as those access right entries will be corrected when such a node is written later. There is a small time window when a new domain is created, where the access rights of a past domain with the same domid as the new one will be regarded to be still valid, leading to the new domain being able to get access to a node which was meant to be accessible by the removed domain. For this to happen another domain needs to write the node before the newly created domain is being introduced to Xenstore by dom0.

• CWE-459

• http://www.openwall.com/lists/oss-security/2022/11/01/7Mailing List, Third Party Advisory
• http://xenbits.xen.org/xsa/advisory-417.htmlPatch, Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YTMITQBGC23MSDHUCAPCVGLMVXIBXQTQ/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YZVXG7OOOXCX6VIPEMLFDPIPUTFAYWPE/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZLI2NPNEH7CNJO3VZGQNOI4M4EWLNKPZ/
• https://security.gentoo.org/glsa/202402-07
• https://www.debian.org/security/2022/dsa-5272Third Party Advisory
• https://xenbits.xenproject.org/xsa/advisory-417.txtPatch, Vendor Advisory
• http://www.openwall.com/lists/oss-security/2022/11/01/7Mailing List, Third Party Advisory
• http://xenbits.xen.org/xsa/advisory-417.htmlPatch, Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YTMITQBGC23MSDHUCAPCVGLMVXIBXQTQ/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YZVXG7OOOXCX6VIPEMLFDPIPUTFAYWPE/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZLI2NPNEH7CNJO3VZGQNOI4M4EWLNKPZ/
• https://security.gentoo.org/glsa/202402-07
• https://www.debian.org/security/2022/dsa-5272Third Party Advisory
• https://xenbits.xenproject.org/xsa/advisory-417.txtPatch, Vendor Advisory

Published

Nov 1, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-42315Xenstore: guests can let run xenstored out of memory T[his C…6.5
• CVE-2022-42316Xenstore: guests can let run xenstored out of memory T[his C…6.5
• CVE-2022-42317Xenstore: guests can let run xenstored out of memory T[his C…6.5
• CVE-2022-42318Xenstore: guests can let run xenstored out of memory T[his C…6.5
• CVE-2022-42319Xenstore: Guests can cause Xenstore to not free temporary me…6.5
• CVE-2022-4232A vulnerability, which was classified as critical, was found…9.8
• CVE-2022-42321Xenstore: Guests can crash xenstored via exhausting the stac…6.5
• CVE-2022-42322Xenstore: Cooperating guests can create arbitrary numbers of…5.5
• CVE-2022-42323Xenstore: Cooperating guests can create arbitrary numbers of…5.5
• CVE-2022-42324Oxenstored 32->31 bit integer truncation issues Integers in …5.5
• CVE-2022-42325Xenstore: Guests can create arbitrary number of nodes via tr…5.5
• CVE-2022-42326Xenstore: Guests can create arbitrary number of nodes via tr…5.5