Description
A use-after-free flaw was found in libvirt. The qemuMonitorUnregister() function in qemuProcessHandleMonitorEOF is called using multiple threads without being adequately protected by a monitor lock. This flaw could be triggered by the virConnectGetAllDomainStats API when the guest is shutting down. An unprivileged client with a read-only connection could use this flaw to perform a denial of service attack by causing the libvirt daemon to crash.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a libvirt
Fixed in libvirt v7.1.0affected
References
- https://bugzilla.redhat.com/show_bug.cgi?id=2024326 ↗
- https://access.redhat.com/security/cve/CVE-2021-3975 ↗
- https://ubuntu.com/security/CVE-2021-3975 ↗
- https://github.com/libvirt/libvirt/commit/1ac703a7d0789e46833f4013a3876c2e3af18ec7 ↗
- https://security.netapp.com/advisory/ntap-20221201-0002/ ↗
- https://lists.debian.org/debian-lts-announce/2024/04/msg00000.html ↗