In MariaDB before 10.9.2, compresswrite in extra/mariabackup/dscompress.cc does not release data_mutex upon a stream write failure, which allows local users to trigger a deadlock.
{ "vanir_signatures": [ { "digest": { "function_hash": "96567548985656349046472553596954460768", "length": 1094.0 }, "deprecated": false, "signature_type": "Function", "source": "https://github.com/mariadb/server/commit/faddcf3c395da640b760c3f701f5bc1f3baae6c4", "id": "CVE-2022-38791-bab28f5d", "signature_version": "v1", "target": { "file": "sql/strfunc.cc", "function": "find_set" } }, { "digest": { "threshold": 0.9, "line_hashes": [ "271363707396860767418283350345897486504", "120596951573328682502907908502941671745", "115421961338400510566446524145876737974", "64074615696916198601226435566349591945" ] }, "deprecated": false, "signature_type": "Line", "source": "https://github.com/mariadb/server/commit/faddcf3c395da640b760c3f701f5bc1f3baae6c4", "id": "CVE-2022-38791-ee10862f", "signature_version": "v1", "target": { "file": "sql/strfunc.cc" } } ] }