CVE-2022-38791: Fedoraproject Fedora

Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days.

In MariaDB before 10.9.2, compress_write in extra/mariabackup/ds_compress.cc does not release data_mutex upon a stream write failure, which allows local users to trigger a deadlock.

Affected products

• Fedoraproject Fedora: version 35 only; version 36 only; version 37 only
• MariaDB MariaDB: from 10.3.0, before 10.3.36 (fixed in 10.3.36); from 10.4.0, before 10.4.26 (fixed in 10.4.26); from 10.5.0, before 10.5.17 (fixed in 10.5.17); from 10.6.0, before 10.6.9 (fixed in 10.6.9); from 10.7.0, before 10.7.5 (fixed in 10.7.5); from 10.8.0, before 10.8.4 (fixed in 10.8.4); …

Published 2022-08-27. Last modified 2026-06-17.