{
  "cveId": "CVE-2022-31621",
  "url": "https://patchblox.com/security/cve/CVE-2022-31621",
  "summary": "CVE-2022-31621 is fixed in 17 products on 1 platform, first by RHSA-2022:1557, released April 26, 2022. It is not reported as exploited. Patch Radar priority: High.",
  "title": "mariadb-10.5: MariaDB Server before 10.7 is vulnerable to Denial of Service",
  "description": "MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/ds_xbstream.cc, when an error occurs (stream_ctxt-\u003Edest_file == NULL) while executing the method xbstream_open, the held lock is not released correctly, which allows local users to trigger a denial of service due to the deadlock. Note: The vendor argues this is just an improper locking bug and not a vulnerability with adverse effects.",
  "published": "2022-04-26T00:00:00Z",
  "severity": "medium",
  "cvss": 7.5,
  "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
  "epss": 0.00223,
  "epssPercentile": 0.13034,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "Judy",
      "release": "RHEL 8",
      "fixedVersion": "0:1.0.5-18.module\u002Bel8.4.0\u002B9031\u002B9abc7af9",
      "fix": "RHSA-2022:1557",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-1557",
      "released": "2022-04-26T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "Judy",
      "release": "almalinux 8",
      "fixedVersion": "1.0.5-18.module_el8.6.0\u002B2867\u002B72759d2f",
      "fix": "ALSA-2022:1557",
      "url": "https://patchblox.com/security/fix/linux/alsa-2022-1557",
      "released": "2022-04-26T13:50:46Z"
    },
    {
      "platform": "linux",
      "product": "Judy",
      "release": "rocky 8",
      "fixedVersion": "0:1.0.5-18.module\u002Bel8.4.0\u002B427\u002Badf35707",
      "fix": "RLSA-2022:1557",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2022-1557",
      "released": "2022-04-26T13:50:46Z"
    },
    {
      "platform": "linux",
      "product": "galera",
      "release": "RHEL 8",
      "fixedVersion": "0:26.4.9-4.module\u002Bel8.5.0\u002B14125\u002Bd11efe18",
      "fix": "RHSA-2022:1557",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-1557",
      "released": "2022-04-26T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "galera",
      "release": "almalinux 8",
      "fixedVersion": "26.4.9-4.module_el8.6.0\u002B2761\u002B593e5e59",
      "fix": "ALSA-2022:1557",
      "url": "https://patchblox.com/security/fix/linux/alsa-2022-1557",
      "released": "2022-04-26T13:50:46Z"
    },
    {
      "platform": "linux",
      "product": "galera",
      "release": "rocky 8",
      "fixedVersion": "0:26.4.9-4.module\u002Bel8.5.0\u002B773\u002Bf75e97f7",
      "fix": "RLSA-2022:1557",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2022-1557",
      "released": "2022-04-26T13:50:46Z"
    },
    {
      "platform": "linux",
      "product": "mariadb",
      "release": "RHEL 8",
      "fixedVersion": "3:10.5.13-1.module\u002Bel8.5.0\u002B14125\u002Bd11efe18",
      "fix": "RHSA-2022:1557",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-1557",
      "released": "2022-04-26T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "mariadb",
      "release": "almalinux 8",
      "fixedVersion": "3:10.5.13-1.module_el8.5.0\u002B2637\u002Bd11efe18",
      "fix": "ALSA-2022:1557",
      "url": "https://patchblox.com/security/fix/linux/alsa-2022-1557",
      "released": "2022-04-26T13:50:46Z"
    },
    {
      "platform": "linux",
      "product": "mariadb",
      "release": "rocky 8",
      "fixedVersion": "3:10.5.13-1.module\u002Bel8.5.0\u002B773\u002Bf75e97f7",
      "fix": "RLSA-2022:1557",
      "url": "https://patchblox.com/security/fix/linux/rlsa-2022-1557",
      "released": "2022-04-26T13:50:46Z"
    },
    {
      "platform": "linux",
      "product": "mariadb-10.5",
      "release": "Debian 11.6 (bullseye)",
      "fixedVersion": "1:10.5.15-0\u002Bdeb11u1",
      "fix": "DEBIAN-CVE-2022-31621",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2022-31621",
      "released": "2022-05-25T21:15:08Z"
    },
    {
      "platform": "linux",
      "product": "mariadb-backup",
      "release": "RHEL 8",
      "fixedVersion": "3:10.5.13-1.module\u002Bel8.5.0\u002B14125\u002Bd11efe18",
      "fix": "RHSA-2022:1557",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-1557",
      "released": "2022-04-26T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "mariadb-backup",
      "release": "almalinux 8",
      "fixedVersion": "3:10.5.13-1.module_el8.6.0\u002B2761\u002B593e5e59",
      "fix": "ALSA-2022:1557",
      "url": "https://patchblox.com/security/fix/linux/alsa-2022-1557",
      "released": "2022-04-26T13:50:46Z"
    },
    {
      "platform": "linux",
      "product": "mariadb-common",
      "release": "RHEL 8",
      "fixedVersion": "3:10.5.13-1.module\u002Bel8.5.0\u002B14125\u002Bd11efe18",
      "fix": "RHSA-2022:1557",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-1557",
      "released": "2022-04-26T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "mariadb-common",
      "release": "almalinux 8",
      "fixedVersion": "3:10.5.13-1.module_el8.6.0\u002B2761\u002B593e5e59",
      "fix": "ALSA-2022:1557",
      "url": "https://patchblox.com/security/fix/linux/alsa-2022-1557",
      "released": "2022-04-26T13:50:46Z"
    },
    {
      "platform": "linux",
      "product": "mariadb-devel",
      "release": "RHEL 8",
      "fixedVersion": "3:10.5.13-1.module\u002Bel8.5.0\u002B14125\u002Bd11efe18",
      "fix": "RHSA-2022:1557",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-1557",
      "released": "2022-04-26T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "mariadb-devel",
      "release": "almalinux 8",
      "fixedVersion": "3:10.5.13-1.module_el8.5.0\u002B2637\u002Bd11efe18",
      "fix": "ALSA-2022:1557",
      "url": "https://patchblox.com/security/fix/linux/alsa-2022-1557",
      "released": "2022-04-26T13:50:46Z"
    },
    {
      "platform": "linux",
      "product": "mariadb-embedded",
      "release": "RHEL 8",
      "fixedVersion": "3:10.5.13-1.module\u002Bel8.5.0\u002B14125\u002Bd11efe18",
      "fix": "RHSA-2022:1557",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-1557",
      "released": "2022-04-26T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "mariadb-embedded",
      "release": "almalinux 8",
      "fixedVersion": "3:10.5.13-1.module_el8.6.0\u002B2761\u002B593e5e59",
      "fix": "ALSA-2022:1557",
      "url": "https://patchblox.com/security/fix/linux/alsa-2022-1557",
      "released": "2022-04-26T13:50:46Z"
    },
    {
      "platform": "linux",
      "product": "mariadb-embedded-devel",
      "release": "RHEL 8",
      "fixedVersion": "3:10.5.13-1.module\u002Bel8.5.0\u002B14125\u002Bd11efe18",
      "fix": "RHSA-2022:1557",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-1557",
      "released": "2022-04-26T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "mariadb-embedded-devel",
      "release": "almalinux 8",
      "fixedVersion": "3:10.5.13-1.module_el8.6.0\u002B2761\u002B593e5e59",
      "fix": "ALSA-2022:1557",
      "url": "https://patchblox.com/security/fix/linux/alsa-2022-1557",
      "released": "2022-04-26T13:50:46Z"
    },
    {
      "platform": "linux",
      "product": "mariadb-errmsg",
      "release": "RHEL 8",
      "fixedVersion": "3:10.5.13-1.module\u002Bel8.5.0\u002B14125\u002Bd11efe18",
      "fix": "RHSA-2022:1557",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-1557",
      "released": "2022-04-26T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "mariadb-errmsg",
      "release": "almalinux 8",
      "fixedVersion": "3:10.5.13-1.module_el8.6.0\u002B2761\u002B593e5e59",
      "fix": "ALSA-2022:1557",
      "url": "https://patchblox.com/security/fix/linux/alsa-2022-1557",
      "released": "2022-04-26T13:50:46Z"
    },
    {
      "platform": "linux",
      "product": "mariadb-gssapi-server",
      "release": "RHEL 8",
      "fixedVersion": "3:10.5.13-1.module\u002Bel8.5.0\u002B14125\u002Bd11efe18",
      "fix": "RHSA-2022:1557",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-1557",
      "released": "2022-04-26T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "mariadb-gssapi-server",
      "release": "almalinux 8",
      "fixedVersion": "3:10.5.13-1.module_el8.6.0\u002B2761\u002B593e5e59",
      "fix": "ALSA-2022:1557",
      "url": "https://patchblox.com/security/fix/linux/alsa-2022-1557",
      "released": "2022-04-26T13:50:46Z"
    },
    {
      "platform": "linux",
      "product": "mariadb-oqgraph-engine",
      "release": "RHEL 8",
      "fixedVersion": "3:10.5.13-1.module\u002Bel8.5.0\u002B14125\u002Bd11efe18",
      "fix": "RHSA-2022:1557",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-1557",
      "released": "2022-04-26T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "mariadb-oqgraph-engine",
      "release": "almalinux 8",
      "fixedVersion": "3:10.5.13-1.module_el8.6.0\u002B2761\u002B593e5e59",
      "fix": "ALSA-2022:1557",
      "url": "https://patchblox.com/security/fix/linux/alsa-2022-1557",
      "released": "2022-04-26T13:50:46Z"
    },
    {
      "platform": "linux",
      "product": "mariadb-pam",
      "release": "RHEL 8",
      "fixedVersion": "3:10.5.13-1.module\u002Bel8.5.0\u002B14125\u002Bd11efe18",
      "fix": "RHSA-2022:1557",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-1557",
      "released": "2022-04-26T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "mariadb-pam",
      "release": "almalinux 8",
      "fixedVersion": "3:10.5.13-1.module_el8.6.0\u002B2761\u002B593e5e59",
      "fix": "ALSA-2022:1557",
      "url": "https://patchblox.com/security/fix/linux/alsa-2022-1557",
      "released": "2022-04-26T13:50:46Z"
    },
    {
      "platform": "linux",
      "product": "mariadb-server",
      "release": "RHEL 8",
      "fixedVersion": "3:10.5.13-1.module\u002Bel8.5.0\u002B14125\u002Bd11efe18",
      "fix": "RHSA-2022:1557",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-1557",
      "released": "2022-04-26T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "mariadb-server",
      "release": "almalinux 8",
      "fixedVersion": "3:10.5.13-1.module_el8.5.0\u002B2637\u002Bd11efe18",
      "fix": "ALSA-2022:1557",
      "url": "https://patchblox.com/security/fix/linux/alsa-2022-1557",
      "released": "2022-04-26T13:50:46Z"
    },
    {
      "platform": "linux",
      "product": "mariadb-server-galera",
      "release": "RHEL 8",
      "fixedVersion": "3:10.5.13-1.module\u002Bel8.5.0\u002B14125\u002Bd11efe18",
      "fix": "RHSA-2022:1557",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-1557",
      "released": "2022-04-26T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "mariadb-server-galera",
      "release": "almalinux 8",
      "fixedVersion": "3:10.5.13-1.module_el8.6.0\u002B2761\u002B593e5e59",
      "fix": "ALSA-2022:1557",
      "url": "https://patchblox.com/security/fix/linux/alsa-2022-1557",
      "released": "2022-04-26T13:50:46Z"
    },
    {
      "platform": "linux",
      "product": "mariadb-server-utils",
      "release": "RHEL 8",
      "fixedVersion": "3:10.5.13-1.module\u002Bel8.5.0\u002B14125\u002Bd11efe18",
      "fix": "RHSA-2022:1557",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-1557",
      "released": "2022-04-26T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "mariadb-server-utils",
      "release": "almalinux 8",
      "fixedVersion": "3:10.5.13-1.module_el8.6.0\u002B2761\u002B593e5e59",
      "fix": "ALSA-2022:1557",
      "url": "https://patchblox.com/security/fix/linux/alsa-2022-1557",
      "released": "2022-04-26T13:50:46Z"
    },
    {
      "platform": "linux",
      "product": "mariadb-test",
      "release": "RHEL 8",
      "fixedVersion": "3:10.5.13-1.module\u002Bel8.5.0\u002B14125\u002Bd11efe18",
      "fix": "RHSA-2022:1557",
      "url": "https://patchblox.com/security/fix/linux/rhsa-2022-1557",
      "released": "2022-04-26T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "mariadb-test",
      "release": "almalinux 8",
      "fixedVersion": "3:10.5.13-1.module_el8.6.0\u002B2761\u002B593e5e59",
      "fix": "ALSA-2022:1557",
      "url": "https://patchblox.com/security/fix/linux/alsa-2022-1557",
      "released": "2022-04-26T13:50:46Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-11T01:43:54Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}