CVE-2023-3750
Fixed in a distro release EPSS <1%CVSS 6.5
A flaw was found in libvirt. The virStoragePoolObjListSearch function does not return a locked pool as expected, resulting in a race condition and denial of service when attempting to lock the same object from another thread. This issue could allow clients connecting to the read-only socket to crash the libvirt daemon.
Products: Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 8 Advanced Virtualization
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| AlmaLinux 9 | libvirt | 9.5.0-7.el9_3.alma.1 |
| AlmaLinux 9 | libvirt-client | 9.5.0-7.el9_3.alma.1 |
| AlmaLinux 9 | libvirt-client-qemu | 9.5.0-7.el9_3.alma.1 |
| AlmaLinux 9 | libvirt-daemon | 9.5.0-7.el9_3.alma.1 |
| AlmaLinux 9 | libvirt-daemon-common | 9.5.0-7.el9_3.alma.1 |
| AlmaLinux 9 | libvirt-daemon-config-network | 9.5.0-7.el9_3.alma.1 |
| AlmaLinux 9 | libvirt-daemon-config-nwfilter | 9.5.0-7.el9_3.alma.1 |
| AlmaLinux 9 | libvirt-daemon-driver-interface | 9.5.0-7.el9_3.alma.1 |
| AlmaLinux 9 | libvirt-daemon-driver-network | 9.5.0-7.el9_3.alma.1 |
| AlmaLinux 9 | libvirt-daemon-driver-nodedev | 9.5.0-7.el9_3.alma.1 |
| AlmaLinux 9 | libvirt-daemon-driver-nwfilter | 9.5.0-7.el9_3.alma.1 |
| AlmaLinux 9 | libvirt-daemon-driver-qemu | 9.5.0-7.el9_3.alma.1 |
| AlmaLinux 9 | libvirt-daemon-driver-secret | 9.5.0-7.el9_3.alma.1 |
| AlmaLinux 9 | libvirt-daemon-driver-storage | 9.5.0-7.el9_3.alma.1 |
| AlmaLinux 9 | libvirt-daemon-driver-storage-core | 9.5.0-7.el9_3.alma.1 |
| AlmaLinux 9 | libvirt-daemon-driver-storage-disk | 9.5.0-7.el9_3.alma.1 |
| AlmaLinux 9 | libvirt-daemon-driver-storage-iscsi | 9.5.0-7.el9_3.alma.1 |
| AlmaLinux 9 | libvirt-daemon-driver-storage-logical | 9.5.0-7.el9_3.alma.1 |
| AlmaLinux 9 | libvirt-daemon-driver-storage-mpath | 9.5.0-7.el9_3.alma.1 |
| AlmaLinux 9 | libvirt-daemon-driver-storage-rbd | 9.5.0-7.el9_3.alma.1 |
| AlmaLinux 9 | libvirt-daemon-driver-storage-scsi | 9.5.0-7.el9_3.alma.1 |
| AlmaLinux 9 | libvirt-daemon-kvm | 9.5.0-7.el9_3.alma.1 |
| AlmaLinux 9 | libvirt-daemon-lock | 9.5.0-7.el9_3.alma.1 |
| AlmaLinux 9 | libvirt-daemon-log | 9.5.0-7.el9_3.alma.1 |
| AlmaLinux 9 | libvirt-daemon-plugin-lockd | 9.5.0-7.el9_3.alma.1 |
| AlmaLinux 9 | libvirt-daemon-plugin-sanlock | 9.5.0-7.el9_3.alma.1 |
| AlmaLinux 9 | libvirt-daemon-proxy | 9.5.0-7.el9_3.alma.1 |
| AlmaLinux 9 | libvirt-devel | 9.5.0-7.el9_3.alma.1 |
| AlmaLinux 9 | libvirt-docs | 9.5.0-7.el9_3.alma.1 |
| AlmaLinux 9 | libvirt-libs | 9.5.0-7.el9_3.alma.1 |
| AlmaLinux 9 | libvirt-nss | 9.5.0-7.el9_3.alma.1 |
| Debian 12 | libvirt | 9.0.0-4+deb12u1 |
| Debian 13 | libvirt | 9.6.0-1 |
| Debian 14 | libvirt | 9.6.0-1 |
| Red Hat Enterprise Linux 9 | libvirt | 0:9.5.0-7.el9_3 |
| Red Hat Enterprise Linux 9 | libvirt-client | 0:9.5.0-7.el9_3 |
| Red Hat Enterprise Linux 9 | libvirt-client-debuginfo | 0:9.5.0-7.el9_3 |
| Red Hat Enterprise Linux 9 | libvirt-client-qemu | 0:9.5.0-7.el9_3 |
| Red Hat Enterprise Linux 9 | libvirt-daemon | 0:9.5.0-7.el9_3 |
| Red Hat Enterprise Linux 9 | libvirt-daemon-common | 0:9.5.0-7.el9_3 |
| Red Hat Enterprise Linux 9 | libvirt-daemon-common-debuginfo | 0:9.5.0-7.el9_3 |
| Red Hat Enterprise Linux 9 | libvirt-daemon-config-network | 0:9.5.0-7.el9_3 |
| Red Hat Enterprise Linux 9 | libvirt-daemon-config-nwfilter | 0:9.5.0-7.el9_3 |
| Red Hat Enterprise Linux 9 | libvirt-daemon-debuginfo | 0:9.5.0-7.el9_3 |
| Red Hat Enterprise Linux 9 | libvirt-daemon-driver-interface | 0:9.5.0-7.el9_3 |
| Red Hat Enterprise Linux 9 | libvirt-daemon-driver-interface-debuginfo | 0:9.5.0-7.el9_3 |
| Red Hat Enterprise Linux 9 | libvirt-daemon-driver-network | 0:9.5.0-7.el9_3 |
| Red Hat Enterprise Linux 9 | libvirt-daemon-driver-network-debuginfo | 0:9.5.0-7.el9_3 |
| Red Hat Enterprise Linux 9 | libvirt-daemon-driver-nodedev | 0:9.5.0-7.el9_3 |
| Red Hat Enterprise Linux 9 | libvirt-daemon-driver-nodedev-debuginfo | 0:9.5.0-7.el9_3 |
| Red Hat Enterprise Linux 9 | libvirt-daemon-driver-nwfilter | 0:9.5.0-7.el9_3 |
| Red Hat Enterprise Linux 9 | libvirt-daemon-driver-nwfilter-debuginfo | 0:9.5.0-7.el9_3 |
| Red Hat Enterprise Linux 9 | libvirt-daemon-driver-qemu | 0:9.5.0-7.el9_3 |
| Red Hat Enterprise Linux 9 | libvirt-daemon-driver-qemu-debuginfo | 0:9.5.0-7.el9_3 |
| Red Hat Enterprise Linux 9 | libvirt-daemon-driver-secret | 0:9.5.0-7.el9_3 |
| Red Hat Enterprise Linux 9 | libvirt-daemon-driver-secret-debuginfo | 0:9.5.0-7.el9_3 |
| Red Hat Enterprise Linux 9 | libvirt-daemon-driver-storage | 0:9.5.0-7.el9_3 |
| Red Hat Enterprise Linux 9 | libvirt-daemon-driver-storage-core | 0:9.5.0-7.el9_3 |
| Red Hat Enterprise Linux 9 | libvirt-daemon-driver-storage-core-debuginfo | 0:9.5.0-7.el9_3 |
| Red Hat Enterprise Linux 9 | libvirt-daemon-driver-storage-disk | 0:9.5.0-7.el9_3 |
| Red Hat Enterprise Linux 9 | libvirt-daemon-driver-storage-disk-debuginfo | 0:9.5.0-7.el9_3 |
| Red Hat Enterprise Linux 9 | libvirt-daemon-driver-storage-iscsi | 0:9.5.0-7.el9_3 |
| Red Hat Enterprise Linux 9 | libvirt-daemon-driver-storage-iscsi-debuginfo | 0:9.5.0-7.el9_3 |
| Red Hat Enterprise Linux 9 | libvirt-daemon-driver-storage-logical | 0:9.5.0-7.el9_3 |
| Red Hat Enterprise Linux 9 | libvirt-daemon-driver-storage-logical-debuginfo | 0:9.5.0-7.el9_3 |
| Red Hat Enterprise Linux 9 | libvirt-daemon-driver-storage-mpath | 0:9.5.0-7.el9_3 |
| Red Hat Enterprise Linux 9 | libvirt-daemon-driver-storage-mpath-debuginfo | 0:9.5.0-7.el9_3 |
| Red Hat Enterprise Linux 9 | libvirt-daemon-driver-storage-rbd | 0:9.5.0-7.el9_3 |
| Red Hat Enterprise Linux 9 | libvirt-daemon-driver-storage-rbd-debuginfo | 0:9.5.0-7.el9_3 |
| Red Hat Enterprise Linux 9 | libvirt-daemon-driver-storage-scsi | 0:9.5.0-7.el9_3 |
| Red Hat Enterprise Linux 9 | libvirt-daemon-driver-storage-scsi-debuginfo | 0:9.5.0-7.el9_3 |
| Red Hat Enterprise Linux 9 | libvirt-daemon-kvm | 0:9.5.0-7.el9_3 |
| Red Hat Enterprise Linux 9 | libvirt-daemon-lock | 0:9.5.0-7.el9_3 |
| Red Hat Enterprise Linux 9 | libvirt-daemon-lock-debuginfo | 0:9.5.0-7.el9_3 |
| Red Hat Enterprise Linux 9 | libvirt-daemon-log | 0:9.5.0-7.el9_3 |
| Red Hat Enterprise Linux 9 | libvirt-daemon-log-debuginfo | 0:9.5.0-7.el9_3 |
| Red Hat Enterprise Linux 9 | libvirt-daemon-plugin-lockd | 0:9.5.0-7.el9_3 |
| Red Hat Enterprise Linux 9 | libvirt-daemon-plugin-lockd-debuginfo | 0:9.5.0-7.el9_3 |
| Red Hat Enterprise Linux 9 | libvirt-daemon-plugin-sanlock | 0:9.5.0-7.el9_3 |
| Red Hat Enterprise Linux 9 | libvirt-daemon-plugin-sanlock-debuginfo | 0:9.5.0-7.el9_3 |
| Red Hat Enterprise Linux 9 | libvirt-daemon-proxy | 0:9.5.0-7.el9_3 |
| Red Hat Enterprise Linux 9 | libvirt-daemon-proxy-debuginfo | 0:9.5.0-7.el9_3 |
| Red Hat Enterprise Linux 9 | libvirt-debuginfo | 0:9.5.0-7.el9_3 |
| Red Hat Enterprise Linux 9 | libvirt-debugsource | 0:9.5.0-7.el9_3 |
| Red Hat Enterprise Linux 9 | libvirt-devel | 0:9.5.0-7.el9_3 |
| Red Hat Enterprise Linux 9 | libvirt-docs | 0:9.5.0-7.el9_3 |
| Red Hat Enterprise Linux 9 | libvirt-libs | 0:9.5.0-7.el9_3 |
| Red Hat Enterprise Linux 9 | libvirt-libs-debuginfo | 0:9.5.0-7.el9_3 |
| Red Hat Enterprise Linux 9 | libvirt-nss | 0:9.5.0-7.el9_3 |
| Red Hat Enterprise Linux 9 | libvirt-nss-debuginfo | 0:9.5.0-7.el9_3 |
| Red Hat Enterprise Linux 9 | libvirt-wireshark-debuginfo | 0:9.5.0-7.el9_3 |
| SUSE Linux Enterprise Module for Basesystem 15 SP5 | libvirt | 9.0.0-150500.6.11.1 |
| SUSE Linux Enterprise Module for Server Applications 15 SP5 | libvirt | 9.0.0-150500.6.11.1 |
| openSUSE Leap 15.5 | libvirt | 9.0.0-150500.6.11.1 |
| openSUSE Tumbleweed | libvirt | 9.5.0-2.1 |