A flaw was found in libvirt. The virStoragePoolObjListSearch function does not return a locked pool as expected, resulting in a race condition and denial of service when attempting to lock the same object from another thread. This issue could allow clients connecting to the read-only socket to crash the libvirt daemon.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-kvmUpgrade libvirt-clientUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-docsUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-commonUpgrade libvirt-daemon-logUpgrade libvirt-daemon-driver-secretUpgrade libvirt-develUpgrade libvirt-daemon-plugin-lockdUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-lockUpgrade libvirt-daemon-proxyUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-libsUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-nssUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-plugin-sanlockUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-qemuUpgrade libvirtUpgrade libvirt-client-qemu | Nov 16, 2023 | Jul 24, 2023 |
| Centos_linux | — | Upgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-debuginfoUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade libvirt-daemon-proxy-debuginfoUpgrade libvirt-libsUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-lock-debuginfoUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-logUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade libvirt-daemon-kvmUpgrade libvirt-daemonUpgrade libvirt-daemon-plugin-lockd-debuginfoUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-libs-debuginfoUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-commonUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade libvirt-daemon-common-debuginfoUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-clientUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade libvirt-nssUpgrade libvirt-daemon-driver-network-debuginfoUpgrade libvirt-wireshark-debuginfoUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-plugin-lockdUpgrade libvirt-daemon-log-debuginfoUpgrade libvirt-daemon-lockUpgrade libvirt-debuginfoUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-proxyUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade libvirt-debugsourceUpgrade libvirt-daemon-plugin-sanlock-debuginfoUpgrade libvirt-client-debuginfoUpgrade libvirt-nss-debuginfoUpgrade libvirtUpgrade libvirt-daemon-driver-interface-debuginfo | Nov 8, 2023 | Jul 24, 2023 |
| Debian | — | Upgrade libvirt | Sep 2, 2024 | Jul 24, 2023 |
| Gentoo Linux | — | Upgrade app-emulation/libvirt. | Dec 12, 2024 | Jul 24, 2023 |
| Oracle_linux | — | Upgrade libvirt-daemon-driver-storage-glusterUpgrade perl-Sys-GuestfsUpgrade qemu-kvm-block-sshUpgrade libtpms-develUpgrade python3-libguestfsUpgrade ruby-hivexUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-libsUpgrade libvirt-daemon-driver-storage-logicalUpgrade nbdkit-basic-pluginsUpgrade nbdkit-gzip-pluginUpgrade python3-libnbdUpgrade ruby-libguestfsUpgrade libguestfs-winsupportUpgrade qemu-imgUpgrade nbdkit-basic-filtersUpgrade libguestfsUpgrade libvirtUpgrade qemu-kvm-coreUpgrade nbdkit-linuxdisk-pluginUpgrade nbdkit-tar-filterUpgrade qemu-virtiofsdUpgrade swtpmUpgrade nbdkit-tar-pluginUpgrade libguestfs-man-pages-jaUpgrade libvirt-daemon-driver-networkUpgrade libguestfs-rescueUpgrade libiscsiUpgrade libguestfs-applianceUpgrade libvirt-daemon-driver-storage-diskUpgrade nbdkit-python-pluginUpgrade lua-guestfsUpgrade nbdkit-curl-pluginUpgrade nbdkit-vddk-pluginUpgrade sgabiosUpgrade libvirt-daemon-lockUpgrade netcf-develUpgrade nbdkit-serverUpgrade qemu-kvm-block-glusterUpgrade perl-hivexUpgrade qemu-kvm-block-rbdUpgrade libvirt-daemon-plugin-sanlockUpgrade swtpm-libsUpgrade libvirt-daemon-driver-storage-coreUpgrade seavgabios-binUpgrade libvirt-daemon-driver-storage-scsiUpgrade libguestfs-inspect-iconsUpgrade libvirt-daemon-driver-qemuUpgrade hivexUpgrade libvirt-daemon-plugin-lockdUpgrade nbdkit-develUpgrade libvirt-daemon-driver-nodedevUpgrade libguestfs-gobjectUpgrade libvirt-nssUpgrade libvirt-daemon-proxyUpgrade nbdkit-gzip-filterUpgrade libvirt-docsUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-commonUpgrade libguestfs-tools-cUpgrade hivex-develUpgrade libvirt-daemon-driver-nwfilterUpgrade swtpm-toolsUpgrade supermin-develUpgrade nbdkit-xz-filterUpgrade libguestfs-develUpgrade virt-v2vUpgrade libnbd-develUpgrade libguestfs-bash-completionUpgrade virt-dibUpgrade qemu-guest-agentUpgrade nbdkit-nbd-pluginUpgrade nbdkitUpgrade swtpm-develUpgrade netcf-libsUpgrade libguestfs-gobject-develUpgrade nbdkit-example-pluginsUpgrade virt-v2v-man-pages-ukUpgrade qemu-kvm-block-curlUpgrade swtpm-tools-pkcs11Upgrade qemu-kvm-commonUpgrade qemu-kvm-block-iscsiUpgrade libguestfs-xfsUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-clientUpgrade superminUpgrade libguestfs-gfs2Upgrade libvirt-wiresharkUpgrade libtpmsUpgrade libguestfs-java-develUpgrade libvirt-develUpgrade python3-hivexUpgrade libvirt-dbusUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade libnbdUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemonUpgrade libguestfs-javadocUpgrade virt-v2v-bash-completionUpgrade libguestfs-rsyncUpgrade nbdkit-bash-completionUpgrade sgabios-binUpgrade seabios-binUpgrade perl-Sys-VirtUpgrade libiscsi-utilsUpgrade netcfUpgrade nbdkit-ssh-pluginUpgrade libvirt-daemon-logUpgrade libguestfs-javaUpgrade libvirt-daemon-kvmUpgrade libguestfs-toolsUpgrade libguestfs-man-pages-ukUpgrade seabiosUpgrade python3-libvirtUpgrade libvirt-client-qemuUpgrade libnbd-bash-completionUpgrade nbdfuseUpgrade nbdkit-tmpdisk-pluginUpgrade qemu-kvmUpgrade virt-v2v-man-pages-jaUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-config-nwfilterUpgrade libiscsi-devel | Oct 7, 2023 | Jul 18, 2023 |
| Redhat_linux | — | Upgrade libvirt-daemon-driver-secret-debuginfoUpgrade libvirt-daemon-plugin-lockd-debuginfoUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-libsUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade libvirt-develUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-proxy-debuginfoUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-common-debuginfoUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-logUpgrade libvirt-client-qemuUpgrade libvirt-daemon-commonUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-debuginfoUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade libvirt-daemon-config-networkUpgrade libvirt-clientUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-network-debuginfoUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-proxyUpgrade libvirtUpgrade libvirt-daemon-plugin-sanlockUpgrade libvirt-debuginfoUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libvirt-daemon-log-debuginfoUpgrade libvirt-daemon-lockUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-nss-debuginfoUpgrade libvirt-docsUpgrade libvirt-libs-debuginfoUpgrade libvirt-debugsourceUpgrade libvirt-daemon-plugin-sanlock-debuginfoUpgrade libvirt-daemon-driver-storageUpgrade libvirt-client-debuginfoUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-plugin-lockdUpgrade libvirt-wireshark-debuginfoUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade libvirt-daemon-lock-debuginfoUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-nss | Nov 8, 2023 | Jul 24, 2023 |
| Suse | — | Upgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-libxlUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-docUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-hooksUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemon-xenUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirtUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-clientUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-lxcUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-develUpgrade libvirt-devel-32bitUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-qemuUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-nssUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-secretUpgrade libvirt-client-qemuUpgrade libvirt-daemon-driver-storage-mpathUpgrade wireshark-plugin-libvirtUpgrade libvirt-libs | Aug 1, 2023 | Jul 24, 2023 |
| Ubuntu | — | Upgrade libvirt0Upgrade libvirt-daemonUpgrade libvirt-daemon-system | Jul 27, 2023 | Jul 24, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 24, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub