Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2023-3750

Libvirt: improper locking in virstoragepoolobjlistsearch may lead to denial of service

Description

A flaw was found in libvirt. The virStoragePoolObjListSearch function does not return a locked pool as expected, resulting in a race condition and denial of service when attempting to lock the same object from another thread. This issue could allow clients connecting to the read-only socket to crash the libvirt daemon.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Red Hat Red Hat Enterprise Linux 9

Default version status: affected

  • 0:9.5.0-7.el9_3 to < *unaffected

Red Hat Red Hat Enterprise Linux 6

Default version status: unaffected

Red Hat Red Hat Enterprise Linux 7

Default version status: unaffected

Red Hat Red Hat Enterprise Linux 8

Default version status: unaffected

Red Hat Red Hat Enterprise Linux 8 Advanced Virtualization

Default version status: unaffected

References