A flaw was found in libvirt. The virStoragePoolObjListSearch function does not return a locked pool as expected, resulting in a race condition and denial of service when attempting to lock the same object from another thread. This issue could allow clients connecting to the read-only socket to crash the libvirt daemon.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libvirtUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-plugin-sanlockUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-client-qemuUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-nssUpgrade libvirt-daemon-proxyUpgrade libvirt-libsUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-develUpgrade libvirt-daemon-commonUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-logUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-lockUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-config-networkUpgrade libvirt-docsUpgrade libvirt-daemon-driver-storageUpgrade libvirt-clientUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-plugin-lockdUpgrade libvirt-daemon-kvm | Nov 16, 2023 | Jul 24, 2023 |
| Centos_linux | — | Upgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-commonUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-plugin-lockd-debuginfoUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-proxy-debuginfoUpgrade libvirt-daemon-debuginfoUpgrade libvirt-libsUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemonUpgrade libvirt-daemon-common-debuginfoUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade libvirt-daemon-lock-debuginfoUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-logUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade libvirt-libs-debuginfoUpgrade libvirt-wireshark-debuginfoUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade libvirt-daemon-plugin-sanlock-debuginfoUpgrade libvirt-client-debuginfoUpgrade libvirt-debugsourceUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-proxyUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade libvirt-daemon-driver-interfaceUpgrade libvirtUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-plugin-lockdUpgrade libvirt-daemon-log-debuginfoUpgrade libvirt-daemon-lockUpgrade libvirt-daemon-driver-network-debuginfoUpgrade libvirt-nss-debuginfoUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade libvirt-daemon-driver-networkUpgrade libvirt-debuginfoUpgrade libvirt-clientUpgrade libvirt-nssUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-nodedev-debuginfo | Nov 8, 2023 | Jul 24, 2023 |
| Debian | — | Upgrade libvirt | Sep 2, 2024 | Jul 24, 2023 |
| Gentoo Linux | — | Upgrade app-emulation/libvirt. | Dec 12, 2024 | Jul 24, 2023 |
| Oracle_linux | — | Upgrade libvirt-daemon-driver-storage-rbdUpgrade superminUpgrade virt-v2v-man-pages-jaUpgrade virt-dibUpgrade hivex-develUpgrade supermin-develUpgrade libiscsi-develUpgrade libguestfs-develUpgrade libvirt-clientUpgrade nbdkit-tmpdisk-pluginUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-secretUpgrade libguestfs-java-develUpgrade libguestfs-bash-completionUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-wiresharkUpgrade nbdkit-example-pluginsUpgrade swtpm-toolsUpgrade libguestfs-xfsUpgrade nbdkit-xz-filterUpgrade swtpm-develUpgrade libguestfs-gobject-develUpgrade netcf-libsUpgrade libnbd-develUpgrade libguestfs-toolsUpgrade libvirt-client-qemuUpgrade python3-libvirtUpgrade seabiosUpgrade libguestfs-man-pages-ukUpgrade nbdfuseUpgrade libnbd-bash-completionUpgrade libguestfs-gfs2Upgrade libvirt-daemon-kvmUpgrade qemu-kvmUpgrade seabios-binUpgrade sgabios-binUpgrade libguestfs-javaUpgrade libiscsi-utilsUpgrade libtpmsUpgrade libnbdUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade nbdkit-ssh-pluginUpgrade netcfUpgrade libvirt-develUpgrade libguestfs-javadocUpgrade libvirt-dbusUpgrade libguestfs-rsyncUpgrade libvirt-daemon-logUpgrade nbdkit-bash-completionUpgrade perl-Sys-VirtUpgrade nbdkitUpgrade nbdkit-nbd-pluginUpgrade libvirt-daemon-commonUpgrade qemu-guest-agentUpgrade libvirt-daemon-driver-nwfilterUpgrade qemu-kvm-block-iscsiUpgrade swtpm-tools-pkcs11Upgrade qemu-kvm-block-curlUpgrade python3-hivexUpgrade virt-v2v-bash-completionUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemonUpgrade virt-v2vUpgrade qemu-kvm-commonUpgrade virt-v2v-man-pages-ukUpgrade libguestfs-tools-cUpgrade nbdkit-basic-filtersUpgrade libguestfsUpgrade hivexUpgrade swtpm-libsUpgrade qemu-kvm-block-rbdUpgrade qemu-kvm-block-glusterUpgrade netcf-develUpgrade libvirt-daemon-driver-storage-diskUpgrade libguestfs-man-pages-jaUpgrade libvirt-daemon-driver-storage-coreUpgrade seavgabios-binUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-nssUpgrade sgabiosUpgrade ruby-hivexUpgrade nbdkit-vddk-pluginUpgrade nbdkit-curl-pluginUpgrade lua-guestfsUpgrade libvirt-daemon-plugin-lockdUpgrade libvirt-daemon-driver-qemuUpgrade libguestfs-inspect-iconsUpgrade nbdkit-gzip-filterUpgrade libvirt-libsUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-storage-glusterUpgrade nbdkit-basic-pluginsUpgrade swtpmUpgrade nbdkit-tar-filterUpgrade ruby-libguestfsUpgrade perl-Sys-GuestfsUpgrade qemu-kvm-coreUpgrade qemu-imgUpgrade python3-libnbdUpgrade nbdkit-gzip-pluginUpgrade libvirt-daemon-driver-storage-logicalUpgrade libtpms-develUpgrade qemu-kvm-block-sshUpgrade python3-libguestfsUpgrade nbdkit-linuxdisk-pluginUpgrade nbdkit-tar-pluginUpgrade libvirt-daemon-lockUpgrade libvirtUpgrade libiscsiUpgrade libguestfs-winsupportUpgrade libguestfs-rescueUpgrade libguestfs-applianceUpgrade qemu-virtiofsdUpgrade nbdkit-python-pluginUpgrade libvirt-daemon-driver-networkUpgrade perl-hivexUpgrade nbdkit-serverUpgrade nbdkit-develUpgrade libvirt-lock-sanlockUpgrade libvirt-docsUpgrade libvirt-daemon-proxyUpgrade libvirt-daemon-plugin-sanlockUpgrade libvirt-daemon-driver-nodedevUpgrade libguestfs-gobject | Oct 7, 2023 | Jul 18, 2023 |
| Redhat_linux | — | Upgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade libvirt-daemon-config-networkUpgrade libvirt-clientUpgrade libvirt-daemon-proxy-debuginfoUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemonUpgrade libvirt-daemon-common-debuginfoUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade libvirt-daemon-commonUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-logUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-plugin-lockd-debuginfoUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade libvirt-libsUpgrade libvirt-daemon-debuginfoUpgrade libvirt-client-qemuUpgrade libvirt-develUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-plugin-lockdUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade libvirtUpgrade libvirt-wireshark-debuginfoUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-plugin-sanlock-debuginfoUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade libvirt-nssUpgrade libvirt-client-debuginfoUpgrade libvirt-daemon-lockUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade libvirt-daemon-log-debuginfoUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-network-debuginfoUpgrade libvirt-nss-debuginfoUpgrade libvirt-daemon-proxyUpgrade libvirt-libs-debuginfoUpgrade libvirt-debugsourceUpgrade libvirt-daemon-plugin-sanlockUpgrade libvirt-daemon-lock-debuginfoUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-debuginfoUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade libvirt-docsUpgrade libvirt-daemon-driver-network | Nov 8, 2023 | Jul 24, 2023 |
| Suse | — | Upgrade libvirt-daemon-xenUpgrade libvirt-docUpgrade libvirt-lock-sanlockUpgrade libvirtUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-clientUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-hooksUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-lxcUpgrade libvirt-daemon-driver-libxlUpgrade libvirt-develUpgrade libvirt-daemon-lxcUpgrade libvirt-daemon-driver-nwfilterUpgrade wireshark-plugin-libvirtUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-libsUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-secretUpgrade libvirt-client-qemuUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-devel-32bitUpgrade libvirt-daemon-qemuUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-nss | Aug 1, 2023 | Jul 24, 2023 |
| Ubuntu | — | Upgrade libvirt-daemon-systemUpgrade libvirt-daemonUpgrade libvirt0 | Jul 27, 2023 | Jul 24, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Jul 24, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub