CVE-2023-3750
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk45th percentile - higher than 45% of all known CVEs
Summary
A flaw was found in libvirt where the virStoragePoolObjListSearch function does not return a locked pool as expected, leading to a race condition and denial of service when attempting to lock the same object from another thread.
Risk Assessment
This issue could allow clients connecting to the read-only socket to crash the libvirt daemon, impacting service availability.
Recommendation
It is recommended to update the libvirt library to the latest version to mitigate this vulnerability and to monitor logs for potential exploitation attempts.
Original NVD description (English source)
A flaw was found in libvirt. The virStoragePoolObjListSearch function does not return a locked pool as expected, resulting in a race condition and denial of service when attempting to lock the same object from another thread. This issue could allow clients connecting to the read-only socket to crash the libvirt daemon.