A flaw was found in libvirt. The virStoragePoolObjListSearch function does not return a locked pool as expected, resulting in a race condition and denial of service when attempting to lock the same object from another thread. This issue could allow clients connecting to the read-only socket to crash the libvirt daemon.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libvirt-daemon-plugin-lockdUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-develUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-clientUpgrade libvirt-daemon-logUpgrade libvirt-daemon-commonUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-docsUpgrade libvirt-daemon-lockUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-libsUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-networkUpgrade libvirt-client-qemuUpgrade libvirt-daemon-plugin-sanlockUpgrade libvirt-nssUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-proxyUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-nodedevUpgrade libvirtUpgrade libvirt-daemon-driver-storage-core | Nov 16, 2023 | Jul 24, 2023 |
| Centos_linux | — | Upgrade libvirt-daemon-proxyUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-network-debuginfoUpgrade libvirt-nss-debuginfoUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-plugin-lockdUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade libvirt-debuginfoUpgrade libvirt-daemon-lockUpgrade libvirt-daemon-log-debuginfoUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade libvirt-wireshark-debuginfoUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libvirt-daemon-driver-networkUpgrade libvirtUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade libvirt-client-debuginfoUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade libvirt-debugsourceUpgrade libvirt-nssUpgrade libvirt-daemon-plugin-sanlock-debuginfoUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade libvirt-clientUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libvirt-daemon-debuginfoUpgrade libvirt-daemon-lock-debuginfoUpgrade libvirt-daemon-commonUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade libvirt-libsUpgrade libvirt-daemon-proxy-debuginfoUpgrade libvirt-daemon-logUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-libs-debuginfoUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade libvirt-daemon-common-debuginfoUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-plugin-lockd-debuginfo | Nov 8, 2023 | Jul 24, 2023 |
| Debian | — | Upgrade libvirt | Sep 2, 2024 | Jul 24, 2023 |
| Gentoo Linux | — | Upgrade app-emulation/libvirt. | Dec 12, 2024 | Jul 24, 2023 |
| Oracle_linux | — | Upgrade libvirt-daemon-driver-storage-scsiUpgrade nbdkit-tar-pluginUpgrade seavgabios-binUpgrade qemu-virtiofsdUpgrade libvirtUpgrade libvirt-docsUpgrade nbdkit-linuxdisk-pluginUpgrade qemu-imgUpgrade qemu-kvm-block-sshUpgrade libvirt-daemon-driver-storage-coreUpgrade nbdkit-curl-pluginUpgrade libvirt-libsUpgrade libvirt-daemon-driver-storage-iscsiUpgrade nbdkit-gzip-pluginUpgrade libguestfs-gobjectUpgrade libvirt-daemon-driver-storage-glusterUpgrade nbdkit-vddk-pluginUpgrade perl-Sys-GuestfsUpgrade libvirt-daemon-lockUpgrade python3-libnbdUpgrade python3-libguestfsUpgrade qemu-kvm-coreUpgrade ruby-hivexUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-storage-diskUpgrade nbdkit-basic-filtersUpgrade lua-guestfsUpgrade libguestfs-man-pages-jaUpgrade ruby-libguestfsUpgrade nbdkit-python-pluginUpgrade netcf-develUpgrade libvirt-daemon-plugin-sanlockUpgrade libvirt-daemon-proxyUpgrade libvirt-lock-sanlockUpgrade nbdkit-develUpgrade nbdkit-serverUpgrade qemu-kvm-block-glusterUpgrade perl-hivexUpgrade libvirt-daemon-driver-nodedevUpgrade qemu-kvm-block-rbdUpgrade swtpm-libsUpgrade libguestfsUpgrade sgabiosUpgrade swtpmUpgrade nbdkit-tar-filterUpgrade libtpms-develUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-plugin-lockdUpgrade libguestfs-inspect-iconsUpgrade nbdkit-gzip-filterUpgrade libguestfs-winsupportUpgrade libvirt-nssUpgrade hivexUpgrade libvirt-daemon-driver-storage-logicalUpgrade libguestfs-rescueUpgrade nbdkit-basic-pluginsUpgrade libguestfs-applianceUpgrade libiscsiUpgrade qemu-kvmUpgrade libvirt-daemon-driver-storage-rbdUpgrade nbdkit-example-pluginsUpgrade libguestfs-xfsUpgrade libguestfs-gobject-develUpgrade swtpm-develUpgrade sgabios-binUpgrade seabios-binUpgrade nbdkit-bash-completionUpgrade libguestfs-javaUpgrade libvirt-daemon-commonUpgrade libvirt-dbusUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-config-nwfilterUpgrade superminUpgrade libnbd-develUpgrade libiscsi-develUpgrade hivex-develUpgrade libvirt-daemon-driver-storage-mpathUpgrade virt-v2v-man-pages-jaUpgrade virt-v2vUpgrade virt-dibUpgrade libvirt-clientUpgrade swtpm-toolsUpgrade nbdkit-tmpdisk-pluginUpgrade libvirt-daemon-driver-nwfilterUpgrade libguestfs-develUpgrade libguestfs-bash-completionUpgrade supermin-develUpgrade nbdkit-xz-filterUpgrade libvirt-daemon-kvmUpgrade libguestfs-toolsUpgrade libguestfs-man-pages-ukUpgrade seabiosUpgrade python3-libvirtUpgrade nbdfuseUpgrade libvirt-client-qemuUpgrade libnbd-bash-completionUpgrade qemu-kvm-block-curlUpgrade virt-v2v-man-pages-ukUpgrade swtpm-tools-pkcs11Upgrade qemu-kvm-block-iscsiUpgrade qemu-guest-agentUpgrade nbdkit-nbd-pluginUpgrade nbdkitUpgrade libguestfs-tools-cUpgrade libvirt-develUpgrade python3-hivexUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemonUpgrade libguestfs-javadocUpgrade libvirt-daemon-driver-secretUpgrade libguestfs-java-develUpgrade libguestfs-gfs2Upgrade libvirt-wiresharkUpgrade libtpmsUpgrade libguestfs-rsyncUpgrade qemu-kvm-commonUpgrade virt-v2v-bash-completionUpgrade perl-Sys-VirtUpgrade libvirt-daemon-logUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade libnbdUpgrade libiscsi-utilsUpgrade netcfUpgrade nbdkit-ssh-pluginUpgrade netcf-libs | Oct 7, 2023 | Jul 18, 2023 |
| Redhat_linux | — | Upgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-lock-debuginfoUpgrade libvirt-nssUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade libvirtUpgrade libvirt-daemon-plugin-sanlockUpgrade libvirt-debuginfoUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libvirt-daemon-lockUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-plugin-sanlock-debuginfoUpgrade libvirt-client-debuginfoUpgrade libvirt-daemon-log-debuginfoUpgrade libvirt-debugsourceUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libvirt-docsUpgrade libvirt-daemon-driver-network-debuginfoUpgrade libvirt-nss-debuginfoUpgrade libvirt-libs-debuginfoUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-proxyUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-plugin-lockdUpgrade libvirt-wireshark-debuginfoUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-clientUpgrade libvirt-daemon-kvmUpgrade libvirt-libsUpgrade libvirt-daemon-logUpgrade libvirt-daemon-commonUpgrade libvirt-client-qemuUpgrade libvirt-develUpgrade libvirt-daemon-debuginfoUpgrade libvirt-daemon-common-debuginfoUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-proxy-debuginfoUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade libvirt-daemon-plugin-lockd-debuginfoUpgrade libvirt-daemon-driver-secret | Nov 8, 2023 | Jul 24, 2023 |
| Suse | — | Upgrade libvirtUpgrade libvirt-lock-sanlockUpgrade libvirt-clientUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-hooksUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-libxlUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-docUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade libvirt-daemon-xenUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-lxcUpgrade libvirt-libsUpgrade wireshark-plugin-libvirtUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-qemuUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-devel-32bitUpgrade libvirt-client-qemuUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-secretUpgrade libvirt-develUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-config-networkUpgrade libvirt-nssUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon | Aug 1, 2023 | Jul 24, 2023 |
| Ubuntu | — | Upgrade libvirt0Upgrade libvirt-daemonUpgrade libvirt-daemon-system | Jul 27, 2023 | Jul 24, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 24, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub