CVE-2023-3750: Libvirt: improper locking in virstoragepoolobjlistsearch may lead to denial of service
A flaw was found in libvirt. The virStoragePoolObjListSearch function does not return a locked pool as expected, resulting in a race condition and denial of service when attempting to lock the same object from another thread. This issue could allow clients connecting to the read-only socket to crash the libvirt daemon.
Other sources
Libvirt: improper locking in virstoragepoolobjlistsearch may lead to denial of service
— Microsoft
virtqemud may get SIGABRT when run the pool-list & vol-info cmds for a rbd pool. An unprivileged user with RO connection can cause the daemon to crash.
Upstream patch: https://listman.redhat.com/archives/libvir-list/2023-July/240776.html
— Red Hat
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2023-3750?
CVE-2023-3750 is a vulnerability in the libvirt component that can lead to a denial of service (DoS) attack due to improper locking in the virStoragePoolObjListSearch function.
What is the severity of CVE-2023-3750?
The severity of CVE-2023-3750 is medium, with a severity value of 5.3.
Which software is affected by CVE-2023-3750?
Redhat Libvirt and Redhat Enterprise Linux versions 9.0 and Ubuntu libvirt version 9.0.0-2ubuntu1.2 are affected by CVE-2023-3750.
How can CVE-2023-3750 be exploited?
CVE-2023-3750 can be exploited when attempting to lock the same object from another thread, resulting in a race condition and denial of service.
Where can I find more information about CVE-2023-3750?
You can find more information about CVE-2023-3750 at the following references: [Red Hat Security Advisory](https://access.redhat.com/security/cve/CVE-2023-3750), [Red Hat Bugzilla](https://bugzilla.redhat.com/show_bug.cgi?id=2222210), [Ubuntu Launchpad](https://launchpad.net/bugs/cve/CVE-2023-3750)