Medium severity5.5NVD Advisory· Published May 25, 2022· Updated Jun 17, 2026
CVE-2022-31622
CVE-2022-31622
Description
MariaDB Server before 10.7 is vulnerable to Denial of Service. In extra/mariabackup/ds_compress.cc, when an error occurs (pthread_create returns a nonzero value) while executing the method create_worker_threads, the held lock is not released correctly, which allows local users to trigger a denial of service due to the deadlock. Note: The vendor argues this is just an improper locking bug and not a vulnerability with adverse effects.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
22- MariaDB/MariaDB Serverdescription
- osv-coords19 versionspkg:rpm/almalinux/Judypkg:rpm/almalinux/galerapkg:rpm/almalinux/mariadbpkg:rpm/almalinux/mariadb-backuppkg:rpm/almalinux/mariadb-commonpkg:rpm/almalinux/mariadb-develpkg:rpm/almalinux/mariadb-embeddedpkg:rpm/almalinux/mariadb-embedded-develpkg:rpm/almalinux/mariadb-errmsgpkg:rpm/almalinux/mariadb-gssapi-serverpkg:rpm/almalinux/mariadb-oqgraph-enginepkg:rpm/almalinux/mariadb-pampkg:rpm/almalinux/mariadb-serverpkg:rpm/almalinux/mariadb-server-galerapkg:rpm/almalinux/mariadb-server-utilspkg:rpm/almalinux/mariadb-testpkg:bitnami/mysql-clientpkg:bitnami/mariadbpkg:bitnami/mariadb-min
< 1.0.5-18.module_el8.6.0+3072+3c630e87+ 18 more
- (no CPE)range: < 1.0.5-18.module_el8.6.0+3072+3c630e87
- (no CPE)range: < 26.4.11-1.module_el8.6.0+3072+3c630e87
- (no CPE)range: < 3:10.5.16-2.module_el8.6.0+3072+3c630e87
- (no CPE)range: < 3:10.5.16-2.module_el8.6.0+3072+3c630e87
- (no CPE)range: < 3:10.5.16-2.module_el8.6.0+3072+3c630e87
- (no CPE)range: < 3:10.5.16-2.module_el8.6.0+3072+3c630e87
- (no CPE)range: < 3:10.5.16-2.module_el8.6.0+3072+3c630e87
- (no CPE)range: < 3:10.5.16-2.module_el8.6.0+3072+3c630e87
- (no CPE)range: < 3:10.5.16-2.module_el8.6.0+3072+3c630e87
- (no CPE)range: < 3:10.5.16-2.module_el8.6.0+3072+3c630e87
- (no CPE)range: < 3:10.5.16-2.module_el8.6.0+3072+3c630e87
- (no CPE)range: < 3:10.5.16-2.module_el8.6.0+3072+3c630e87
- (no CPE)range: < 3:10.5.16-2.module_el8.6.0+3072+3c630e87
- (no CPE)range: < 3:10.5.16-2.module_el8.6.0+3072+3c630e87
- (no CPE)range: < 3:10.5.16-2.module_el8.6.0+3072+3c630e87
- (no CPE)range: < 3:10.5.16-2.module_el8.6.0+3072+3c630e87
- (no CPE)range: < 10.2.42
- (no CPE)range: < 10.2.42
- (no CPE)range: < 10.2.42
Patches
Vulnerability mechanics
References
5- github.com/MariaDB/server/commit/e1eb39a446c30b8459c39fd7f2ee1c55a36e97d2nvdPatchThird Party Advisory
- jira.mariadb.org/browse/MDEV-26561nvdIssue TrackingPermissions RequiredThird Party Advisory
- security.netapp.com/advisory/ntap-20220707-0006/nvdThird Party Advisory
- jira.mariadb.org/browse/MDEV-26561nvd
- jira.mariadb.org/browse/MDEV-26574nvd
News mentions
0No linked articles in our index yet.