Medium severity6.5NVD Advisory· Published Mar 2, 2022· Updated Jun 17, 2026

CVE-2021-3667

Description

An improper locking issue was found in the virStoragePoolLookupByTargetPath API of libvirt. It occurs in the storagePoolLookupByTargetPath function where a locked virStoragePoolObj object is not properly released on ACL permission failure. Clients connecting to the read-write socket with limited ACL permissions could use this flaw to acquire the lock and prevent other users from accessing storage pool/volume APIs, resulting in a denial of service condition. The highest threat from this vulnerability is to system availability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

116

NetApp/Ontap Select Deploy Administration Utility
cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:*
Red Hat/Libvirt2 versions
cpe:2.3:a:redhat:libvirt:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:redhat:libvirt:*:*:*:*:*:*:*:*range: >=4.1.0,<=7.5.0
- (no CPE)range: Fixedin - libvert v7.6.0-rc1 and above
Debian/linux
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
Red Hat/Enterprise Linux Server
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:advanced_virtualization:*:*:*
Libvirt/Libvirtllm-fuzzy
osv-coords110 versions
pkg:rpm/almalinux/hivex pkg:rpm/almalinux/hivex-devel pkg:rpm/almalinux/libguestfs pkg:rpm/almalinux/libguestfs-bash-completion pkg:rpm/almalinux/libguestfs-benchmarking pkg:rpm/almalinux/libguestfs-devel pkg:rpm/almalinux/libguestfs-gfs2 pkg:rpm/almalinux/libguestfs-gobject pkg:rpm/almalinux/libguestfs-gobject-devel pkg:rpm/almalinux/libguestfs-inspect-icons pkg:rpm/almalinux/libguestfs-java pkg:rpm/almalinux/libguestfs-java-devel pkg:rpm/almalinux/libguestfs-javadoc pkg:rpm/almalinux/libguestfs-man-pages-ja pkg:rpm/almalinux/libguestfs-man-pages-uk pkg:rpm/almalinux/libguestfs-rescue pkg:rpm/almalinux/libguestfs-rsync pkg:rpm/almalinux/libguestfs-tools pkg:rpm/almalinux/libguestfs-tools-c pkg:rpm/almalinux/libguestfs-winsupport pkg:rpm/almalinux/libguestfs-xfs pkg:rpm/almalinux/libiscsi pkg:rpm/almalinux/libiscsi-devel pkg:rpm/almalinux/libiscsi-utils pkg:rpm/almalinux/libnbd pkg:rpm/almalinux/libnbd-devel pkg:rpm/almalinux/libvirt pkg:rpm/almalinux/libvirt-admin pkg:rpm/almalinux/libvirt-bash-completion pkg:rpm/almalinux/libvirt-client pkg:rpm/almalinux/libvirt-daemon pkg:rpm/almalinux/libvirt-daemon-config-network pkg:rpm/almalinux/libvirt-daemon-config-nwfilter pkg:rpm/almalinux/libvirt-daemon-driver-interface pkg:rpm/almalinux/libvirt-daemon-driver-network pkg:rpm/almalinux/libvirt-daemon-driver-nodedev pkg:rpm/almalinux/libvirt-daemon-driver-nwfilter pkg:rpm/almalinux/libvirt-daemon-driver-qemu pkg:rpm/almalinux/libvirt-daemon-driver-secret pkg:rpm/almalinux/libvirt-daemon-driver-storage pkg:rpm/almalinux/libvirt-daemon-driver-storage-core pkg:rpm/almalinux/libvirt-daemon-driver-storage-disk pkg:rpm/almalinux/libvirt-daemon-driver-storage-gluster pkg:rpm/almalinux/libvirt-daemon-driver-storage-iscsi pkg:rpm/almalinux/libvirt-daemon-driver-storage-iscsi-direct pkg:rpm/almalinux/libvirt-daemon-driver-storage-logical pkg:rpm/almalinux/libvirt-daemon-driver-storage-mpath pkg:rpm/almalinux/libvirt-daemon-driver-storage-rbd pkg:rpm/almalinux/libvirt-daemon-driver-storage-scsi pkg:rpm/almalinux/libvirt-daemon-kvm pkg:rpm/almalinux/libvirt-dbus pkg:rpm/almalinux/libvirt-devel pkg:rpm/almalinux/libvirt-docs pkg:rpm/almalinux/libvirt-libs pkg:rpm/almalinux/libvirt-lock-sanlock pkg:rpm/almalinux/libvirt-nss pkg:rpm/almalinux/lua-guestfs pkg:rpm/almalinux/nbdfuse pkg:rpm/almalinux/nbdkit pkg:rpm/almalinux/nbdkit-bash-completion pkg:rpm/almalinux/nbdkit-basic-filters pkg:rpm/almalinux/nbdkit-basic-plugins pkg:rpm/almalinux/nbdkit-curl-plugin pkg:rpm/almalinux/nbdkit-devel pkg:rpm/almalinux/nbdkit-example-plugins pkg:rpm/almalinux/nbdkit-gzip-plugin pkg:rpm/almalinux/nbdkit-linuxdisk-plugin pkg:rpm/almalinux/nbdkit-python-plugin pkg:rpm/almalinux/nbdkit-server pkg:rpm/almalinux/nbdkit-ssh-plugin pkg:rpm/almalinux/nbdkit-vddk-plugin pkg:rpm/almalinux/nbdkit-xz-filter pkg:rpm/almalinux/netcf pkg:rpm/almalinux/netcf-devel pkg:rpm/almalinux/netcf-libs pkg:rpm/almalinux/perl-Sys-Guestfs pkg:rpm/almalinux/perl-Sys-Virt pkg:rpm/almalinux/perl-hivex pkg:rpm/almalinux/python3-hivex pkg:rpm/almalinux/python3-libguestfs pkg:rpm/almalinux/python3-libnbd pkg:rpm/almalinux/python3-libvirt pkg:rpm/almalinux/ruby-hivex pkg:rpm/almalinux/ruby-libguestfs pkg:rpm/almalinux/seabios pkg:rpm/almalinux/seabios-bin pkg:rpm/almalinux/seavgabios-bin pkg:rpm/almalinux/sgabios pkg:rpm/almalinux/sgabios-bin pkg:rpm/almalinux/supermin pkg:rpm/almalinux/supermin-devel pkg:rpm/almalinux/virt-dib pkg:rpm/almalinux/virt-v2v pkg:rpm/opensuse/libvirt&distro=openSUSE%20Leap%2015.2 pkg:rpm/opensuse/libvirt&distro=openSUSE%20Leap%2015.3 pkg:rpm/opensuse/libvirt&distro=openSUSE%20Tumbleweed pkg:rpm/suse/libvirt&distro=SUSE%20Enterprise%20Storage%206 pkg:rpm/suse/libvirt&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-ESPOS pkg:rpm/suse/libvirt&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP1-LTSS pkg:rpm/suse/libvirt&distro=SUSE%20Linux%20Enterprise%20Micro%205.0 pkg:rpm/suse/libvirt&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP2 pkg:rpm/suse/libvirt&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP3 pkg:rpm/suse/libvirt&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Server%20Applications%2015%20SP2 pkg:rpm/suse/libvirt&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Server%20Applications%2015%20SP3 pkg:rpm/suse/libvirt&distro=SUSE%20Linux%20Enterprise%20Server%2012%20SP5 pkg:rpm/suse/libvirt&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-BCL pkg:rpm/suse/libvirt&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP1-LTSS pkg:rpm/suse/libvirt&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2012%20SP5 pkg:rpm/suse/libvirt&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP1 pkg:rpm/suse/libvirt&distro=SUSE%20Linux%20Enterprise%20Software%20Development%20Kit%2012%20SP5
< 1.3.18-21.module_el8.5.0+2608+72063365+ 109 more
- (no CPE)range: < 1.3.18-21.module_el8.5.0+2608+72063365
- (no CPE)range: < 1.3.18-21.module_el8.5.0+2608+72063365
- (no CPE)range: < 1:1.40.2-28.module_el8.5.0+2608+72063365.alma
- (no CPE)range: < 1:1.40.2-28.module_el8.5.0+2608+72063365.alma
- (no CPE)range: < 1:1.40.2-28.module_el8.5.0+2608+72063365.alma
- (no CPE)range: < 1:1.40.2-28.module_el8.5.0+2608+72063365.alma
- (no CPE)range: < 1:1.40.2-28.module_el8.5.0+2608+72063365.alma
- (no CPE)range: < 1:1.40.2-28.module_el8.5.0+2608+72063365.alma
- (no CPE)range: < 1:1.40.2-28.module_el8.5.0+2608+72063365.alma
- (no CPE)range: < 1:1.40.2-28.module_el8.5.0+2608+72063365.alma
- (no CPE)range: < 1:1.40.2-28.module_el8.5.0+2608+72063365.alma
- (no CPE)range: < 1:1.40.2-28.module_el8.5.0+2608+72063365.alma
- (no CPE)range: < 1:1.40.2-28.module_el8.5.0+2608+72063365.alma
- (no CPE)range: < 1:1.40.2-28.module_el8.5.0+2608+72063365.alma
- (no CPE)range: < 1:1.40.2-28.module_el8.5.0+2608+72063365.alma
- (no CPE)range: < 1:1.40.2-28.module_el8.5.0+2608+72063365.alma
- (no CPE)range: < 1:1.40.2-28.module_el8.5.0+2608+72063365.alma
- (no CPE)range: < 1:1.40.2-28.module_el8.5.0+2608+72063365.alma
- (no CPE)range: < 1:1.40.2-28.module_el8.5.0+2608+72063365.alma
- (no CPE)range: < 8.2-1.module_el8.5.0+2608+72063365
- (no CPE)range: < 1:1.40.2-28.module_el8.5.0+2608+72063365.alma
- (no CPE)range: < 1.18.0-8.module_el8.6.0+2880+7d9e3703
- (no CPE)range: < 1.18.0-8.module_el8.6.0+2880+7d9e3703
- (no CPE)range: < 1.18.0-8.module_el8.6.0+2880+7d9e3703
- (no CPE)range: < 1.2.2-1.module_el8.5.0+2608+72063365
- (no CPE)range: < 1.2.2-1.module_el8.5.0+2608+72063365
- (no CPE)range: < 6.0.0-37.module_el8.5.0+2608+72063365
- (no CPE)range: < 6.0.0-37.module_el8.5.0+2608+72063365
- (no CPE)range: < 6.0.0-37.module_el8.5.0+2608+72063365
- (no CPE)range: < 6.0.0-37.module_el8.5.0+2608+72063365
- (no CPE)range: < 6.0.0-37.module_el8.5.0+2608+72063365
- (no CPE)range: < 6.0.0-37.module_el8.5.0+2608+72063365
- (no CPE)range: < 6.0.0-37.module_el8.5.0+2608+72063365
- (no CPE)range: < 6.0.0-37.module_el8.5.0+2608+72063365
- (no CPE)range: < 6.0.0-37.module_el8.5.0+2608+72063365
- (no CPE)range: < 6.0.0-37.module_el8.5.0+2608+72063365
- (no CPE)range: < 6.0.0-37.module_el8.5.0+2608+72063365
- (no CPE)range: < 6.0.0-37.module_el8.5.0+2608+72063365
- (no CPE)range: < 6.0.0-37.module_el8.5.0+2608+72063365
- (no CPE)range: < 6.0.0-37.module_el8.5.0+2608+72063365
- (no CPE)range: < 6.0.0-37.module_el8.5.0+2608+72063365
- (no CPE)range: < 6.0.0-37.module_el8.5.0+2608+72063365
- (no CPE)range: < 6.0.0-37.module_el8.5.0+2608+72063365
- (no CPE)range: < 6.0.0-37.module_el8.5.0+2608+72063365
- (no CPE)range: < 6.0.0-37.module_el8.5.0+2608+72063365
- (no CPE)range: < 6.0.0-37.module_el8.5.0+2608+72063365
- (no CPE)range: < 6.0.0-37.module_el8.5.0+2608+72063365
- (no CPE)range: < 6.0.0-37.module_el8.5.0+2608+72063365
- (no CPE)range: < 6.0.0-37.module_el8.5.0+2608+72063365
- (no CPE)range: < 6.0.0-37.module_el8.5.0+2608+72063365
- (no CPE)range: < 1.3.0-2.module_el8.6.0+2880+7d9e3703
- (no CPE)range: < 6.0.0-37.module_el8.5.0+2608+72063365
- (no CPE)range: < 6.0.0-37.module_el8.5.0+2608+72063365
- (no CPE)range: < 6.0.0-37.module_el8.5.0+2608+72063365
- (no CPE)range: < 6.0.0-37.module_el8.5.0+2608+72063365
- (no CPE)range: < 6.0.0-37.module_el8.5.0+2608+72063365
- (no CPE)range: < 1:1.40.2-28.module_el8.5.0+2608+72063365.alma
- (no CPE)range: < 1.2.2-1.module_el8.5.0+2608+72063365
- (no CPE)range: < 1.16.2-4.module_el8.5.0+2608+72063365
- (no CPE)range: < 1.16.2-4.module_el8.5.0+2608+72063365
- (no CPE)range: < 1.16.2-4.module_el8.5.0+2608+72063365
- (no CPE)range: < 1.16.2-4.module_el8.5.0+2608+72063365
- (no CPE)range: < 1.16.2-4.module_el8.5.0+2608+72063365
- (no CPE)range: < 1.16.2-4.module_el8.5.0+2608+72063365
- (no CPE)range: < 1.16.2-4.module_el8.5.0+2608+72063365
- (no CPE)range: < 1.16.2-4.module_el8.5.0+2608+72063365
- (no CPE)range: < 1.16.2-4.module_el8.5.0+2608+72063365
- (no CPE)range: < 1.16.2-4.module_el8.5.0+2608+72063365
- (no CPE)range: < 1.16.2-4.module_el8.5.0+2608+72063365
- (no CPE)range: < 1.16.2-4.module_el8.5.0+2608+72063365
- (no CPE)range: < 1.16.2-4.module_el8.5.0+2608+72063365
- (no CPE)range: < 1.16.2-4.module_el8.5.0+2608+72063365
- (no CPE)range: < 0.2.8-12.module_el8.5.0+2608+72063365
- (no CPE)range: < 0.2.8-12.module_el8.6.0+2880+7d9e3703
- (no CPE)range: < 0.2.8-12.module_el8.6.0+2880+7d9e3703
- (no CPE)range: < 1:1.40.2-28.module_el8.5.0+2608+72063365.alma
- (no CPE)range: < 6.0.0-1.module_el8.5.0+2608+72063365
- (no CPE)range: < 1.3.18-21.module_el8.5.0+2608+72063365
- (no CPE)range: < 1.3.18-21.module_el8.5.0+2608+72063365
- (no CPE)range: < 1:1.40.2-28.module_el8.5.0+2608+72063365.alma
- (no CPE)range: < 1.2.2-1.module_el8.5.0+2608+72063365
- (no CPE)range: < 6.0.0-1.module_el8.5.0+2608+72063365
- (no CPE)range: < 1.3.18-21.module_el8.5.0+2608+72063365
- (no CPE)range: < 1:1.40.2-28.module_el8.5.0+2608+72063365.alma
- (no CPE)range: < 1.13.0-2.module_el8.5.0+2608+72063365
- (no CPE)range: < 1.13.0-2.module_el8.5.0+2608+72063365
- (no CPE)range: < 1.13.0-2.module_el8.5.0+2608+72063365
- (no CPE)range: < 1:0.20170427git-3.module_el8.5.0+2608+72063365
- (no CPE)range: < 1:0.20170427git-3.module_el8.5.0+2608+72063365
- (no CPE)range: < 5.1.19-10.module_el8.5.0+2608+72063365
- (no CPE)range: < 5.1.19-10.module_el8.5.0+2608+72063365
- (no CPE)range: < 1:1.40.2-28.module_el8.5.0+2608+72063365.alma
- (no CPE)range: < 1:1.40.2-28.module_el8.5.0+2608+72063365.alma
- (no CPE)range: < 6.0.0-lp152.9.15.1
- (no CPE)range: < 7.1.0-6.5.1
- (no CPE)range: < 7.7.0-2.1
- (no CPE)range: < 5.1.0-8.29.1
- (no CPE)range: < 5.1.0-8.29.1
- (no CPE)range: < 5.1.0-8.29.1
- (no CPE)range: < 6.0.0-13.21.1
- (no CPE)range: < 6.0.0-13.21.1
- (no CPE)range: < 7.1.0-6.5.1
- (no CPE)range: < 6.0.0-13.21.1
- (no CPE)range: < 7.1.0-6.5.1
- (no CPE)range: < 5.1.0-13.25.1
- (no CPE)range: < 5.1.0-8.29.1
- (no CPE)range: < 5.1.0-8.29.1
- (no CPE)range: < 5.1.0-13.25.1
- (no CPE)range: < 5.1.0-8.29.1
- (no CPE)range: < 5.1.0-13.25.1

Patches

Vulnerability mechanics

References

gitlab.com/libvirt/libvirt/-/commit/447f69dec47e1b0bd15ecd7cd49a9fd3b050fb87nvdPatchThird Party Advisory
libvirt.org/git/nvdPatch
bugzilla.redhat.com/show_bug.cginvdIssue TrackingVendor Advisory
lists.debian.org/debian-lts-announce/2024/04/msg00000.htmlnvdMailing ListThird Party Advisory
security.gentoo.org/glsa/202210-06nvdThird Party Advisory
security.netapp.com/advisory/ntap-20220331-0005/nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000