A flaw was found in libvirt. The virStoragePoolObjListSearch function does not return a locked pool as expected, resulting in a race condition and denial of service when attempting to lock the same object from another thread. This issue could allow clients connecting to the read-only socket to crash the libvirt daemon.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-client-qemuUpgrade libvirt-daemon-proxyUpgrade libvirtUpgrade libvirt-libsUpgrade libvirt-nssUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-plugin-sanlockUpgrade libvirt-daemon-commonUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-kvmUpgrade libvirt-docsUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-storageUpgrade libvirt-develUpgrade libvirt-daemon-logUpgrade libvirt-daemon-plugin-lockdUpgrade libvirt-daemon-lockUpgrade libvirt-daemon-driver-secretUpgrade libvirt-client | Nov 16, 2023 | Jul 24, 2023 |
| Centos_linux | — | Upgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-debuginfoUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-commonUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-plugin-lockd-debuginfoUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade libvirt-daemon-lock-debuginfoUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-kvmUpgrade libvirt-libsUpgrade libvirt-daemon-common-debuginfoUpgrade libvirt-daemon-logUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade libvirt-libs-debuginfoUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade libvirt-daemon-proxy-debuginfoUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libvirt-daemon-driver-networkUpgrade libvirt-wireshark-debuginfoUpgrade libvirt-daemon-log-debuginfoUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-plugin-lockdUpgrade libvirt-debugsourceUpgrade libvirtUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-debuginfoUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade libvirt-daemon-driver-network-debuginfoUpgrade libvirt-clientUpgrade libvirt-nssUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-nss-debuginfoUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade libvirt-client-debuginfoUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-proxyUpgrade libvirt-daemon-plugin-sanlock-debuginfoUpgrade libvirt-daemon-lockUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-nwfilter-debuginfo | Nov 8, 2023 | Jul 24, 2023 |
| Debian | — | Upgrade libvirt | Sep 2, 2024 | Jul 24, 2023 |
| Gentoo Linux | — | Upgrade app-emulation/libvirt. | Dec 12, 2024 | Jul 24, 2023 |
| Oracle_linux | — | Upgrade libvirt-nssUpgrade nbdkit-gzip-filterUpgrade libvirt-daemon-proxyUpgrade nbdkit-develUpgrade libvirt-daemon-plugin-sanlockUpgrade nbdkit-serverUpgrade swtpm-libsUpgrade libguestfs-gobjectUpgrade libvirt-daemon-driver-nodedevUpgrade perl-hivexUpgrade nbdkit-gzip-pluginUpgrade ruby-libguestfsUpgrade libvirt-daemon-lockUpgrade libvirt-docsUpgrade libguestfs-inspect-iconsUpgrade libvirt-daemon-plugin-lockdUpgrade hivexUpgrade nbdkit-linuxdisk-pluginUpgrade libvirt-lock-sanlockUpgrade libguestfs-rescueUpgrade nbdkit-tar-pluginUpgrade libvirt-daemon-driver-qemuUpgrade qemu-kvm-block-rbdUpgrade python3-libguestfsUpgrade libvirtUpgrade libguestfs-applianceUpgrade qemu-imgUpgrade libvirt-daemon-driver-storage-glusterUpgrade qemu-kvm-coreUpgrade qemu-virtiofsdUpgrade libguestfsUpgrade libvirt-daemon-driver-storage-iscsiUpgrade perl-Sys-GuestfsUpgrade python3-libnbdUpgrade nbdkit-curl-pluginUpgrade sgabiosUpgrade libguestfs-winsupportUpgrade ruby-hivexUpgrade qemu-kvm-block-sshUpgrade libvirt-libsUpgrade nbdkit-vddk-pluginUpgrade lua-guestfsUpgrade libiscsiUpgrade libtpms-develUpgrade nbdkit-basic-pluginsUpgrade nbdkit-tar-filterUpgrade nbdkit-python-pluginUpgrade swtpmUpgrade libvirt-daemon-driver-storage-diskUpgrade nbdkit-basic-filtersUpgrade netcf-develUpgrade libvirt-daemon-driver-storage-logicalUpgrade qemu-kvm-block-glusterUpgrade libguestfs-man-pages-jaUpgrade seavgabios-binUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-storage-scsiUpgrade nbdkit-tmpdisk-pluginUpgrade libvirt-client-qemuUpgrade libnbd-develUpgrade libiscsi-develUpgrade hivex-develUpgrade libguestfs-man-pages-ukUpgrade python3-libvirtUpgrade libnbd-bash-completionUpgrade libvirt-daemon-kvmUpgrade seabiosUpgrade virt-dibUpgrade nbdkit-xz-filterUpgrade swtpm-toolsUpgrade supermin-develUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-clientUpgrade libguestfs-develUpgrade libguestfs-bash-completionUpgrade virt-v2vUpgrade libvirt-daemon-driver-storage-mpathUpgrade superminUpgrade qemu-kvmUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-config-nwfilterUpgrade virt-v2v-man-pages-jaUpgrade libguestfs-gfs2Upgrade libtpmsUpgrade qemu-guest-agentUpgrade nbdkitUpgrade libvirt-daemon-commonUpgrade libguestfs-tools-cUpgrade nbdkit-nbd-pluginUpgrade qemu-kvm-commonUpgrade libvirt-daemonUpgrade virt-v2v-bash-completionUpgrade python3-hivexUpgrade libvirt-develUpgrade libvirt-dbusUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-config-networkUpgrade libguestfs-rsyncUpgrade libguestfs-javadocUpgrade swtpm-tools-pkcs11Upgrade virt-v2v-man-pages-ukUpgrade qemu-kvm-block-iscsiUpgrade qemu-kvm-block-curlUpgrade swtpm-develUpgrade netcf-libsUpgrade libguestfs-xfsUpgrade libguestfs-gobject-develUpgrade nbdkit-example-pluginsUpgrade nbdfuseUpgrade libiscsi-utilsUpgrade netcfUpgrade nbdkit-ssh-pluginUpgrade nbdkit-bash-completionUpgrade libvirt-daemon-logUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade libnbdUpgrade libguestfs-javaUpgrade sgabios-binUpgrade seabios-binUpgrade perl-Sys-VirtUpgrade libvirt-wiresharkUpgrade libvirt-daemon-driver-secretUpgrade libguestfs-java-develUpgrade libguestfs-tools | Oct 7, 2023 | Jul 18, 2023 |
| Redhat_linux | — | Upgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade libvirt-docsUpgrade libvirt-daemon-plugin-sanlockUpgrade libvirt-debuginfoUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libvirtUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-log-debuginfoUpgrade libvirt-daemon-driver-storageUpgrade libvirt-libs-debuginfoUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-nss-debuginfoUpgrade libvirt-nssUpgrade libvirt-daemon-lock-debuginfoUpgrade libvirt-daemon-lockUpgrade libvirt-daemon-driver-network-debuginfoUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade libvirt-daemon-plugin-lockdUpgrade libvirt-daemon-plugin-sanlock-debuginfoUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libvirt-client-debuginfoUpgrade libvirt-wireshark-debuginfoUpgrade libvirt-debugsourceUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-proxyUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-clientUpgrade libvirt-daemon-config-networkUpgrade libvirt-client-qemuUpgrade libvirt-develUpgrade libvirt-daemon-debuginfoUpgrade libvirt-daemon-proxy-debuginfoUpgrade libvirt-daemon-logUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade libvirt-daemon-commonUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-plugin-lockd-debuginfoUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-libsUpgrade libvirt-daemon-common-debuginfoUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-storage-iscsi-debuginfo | Nov 8, 2023 | Jul 24, 2023 |
| Suse | — | Upgrade libvirt-daemon-hooksUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-libxlUpgrade libvirtUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-clientUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemon-xenUpgrade libvirt-docUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-devel-32bitUpgrade libvirt-develUpgrade libvirt-daemon-qemuUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-client-qemuUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-interfaceUpgrade wireshark-plugin-libvirtUpgrade libvirt-libsUpgrade libvirt-daemon-lxcUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-nssUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-nwfilter | Aug 1, 2023 | Jul 24, 2023 |
| Ubuntu | — | Upgrade libvirt0Upgrade libvirt-daemonUpgrade libvirt-daemon-system | Jul 27, 2023 | Jul 24, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 24, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub