Unrated severityNVD Advisory· Published Jul 24, 2023· Updated Nov 8, 2025
Libvirt: improper locking in virstoragepoolobjlistsearch may lead to denial of service
CVE-2023-3750
Description
A flaw was found in libvirt. The virStoragePoolObjListSearch function does not return a locked pool as expected, resulting in a race condition and denial of service when attempting to lock the same object from another thread. This issue could allow clients connecting to the read-only socket to crash the libvirt daemon.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
41- Red Hat/Red Hat Enterprise Linux 8 Advanced Virtualizationv5cpe:/a:redhat:advanced_virtualization:8::el8
cpe:/a:redhat:enterprise_linux:9::appstream+ 3 more
- cpe:/a:redhat:enterprise_linux:9::appstreamrange: 0:9.5.0-7.el9_3
- cpe:/o:redhat:enterprise_linux:6
- cpe:/o:redhat:enterprise_linux:7
- cpe:/o:redhat:enterprise_linux:8
- osv-coords35 versionspkg:rpm/almalinux/libvirtpkg:rpm/almalinux/libvirt-clientpkg:rpm/almalinux/libvirt-client-qemupkg:rpm/almalinux/libvirt-daemonpkg:rpm/almalinux/libvirt-daemon-commonpkg:rpm/almalinux/libvirt-daemon-config-networkpkg:rpm/almalinux/libvirt-daemon-config-nwfilterpkg:rpm/almalinux/libvirt-daemon-driver-interfacepkg:rpm/almalinux/libvirt-daemon-driver-networkpkg:rpm/almalinux/libvirt-daemon-driver-nodedevpkg:rpm/almalinux/libvirt-daemon-driver-nwfilterpkg:rpm/almalinux/libvirt-daemon-driver-qemupkg:rpm/almalinux/libvirt-daemon-driver-secretpkg:rpm/almalinux/libvirt-daemon-driver-storagepkg:rpm/almalinux/libvirt-daemon-driver-storage-corepkg:rpm/almalinux/libvirt-daemon-driver-storage-diskpkg:rpm/almalinux/libvirt-daemon-driver-storage-iscsipkg:rpm/almalinux/libvirt-daemon-driver-storage-logicalpkg:rpm/almalinux/libvirt-daemon-driver-storage-mpathpkg:rpm/almalinux/libvirt-daemon-driver-storage-rbdpkg:rpm/almalinux/libvirt-daemon-driver-storage-scsipkg:rpm/almalinux/libvirt-daemon-kvmpkg:rpm/almalinux/libvirt-daemon-lockpkg:rpm/almalinux/libvirt-daemon-logpkg:rpm/almalinux/libvirt-daemon-plugin-lockdpkg:rpm/almalinux/libvirt-daemon-plugin-sanlockpkg:rpm/almalinux/libvirt-daemon-proxypkg:rpm/almalinux/libvirt-develpkg:rpm/almalinux/libvirt-docspkg:rpm/almalinux/libvirt-libspkg:rpm/almalinux/libvirt-nsspkg:rpm/opensuse/libvirt&distro=openSUSE%20Leap%2015.5pkg:rpm/opensuse/libvirt&distro=openSUSE%20Tumbleweedpkg:rpm/suse/libvirt&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP5pkg:rpm/suse/libvirt&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Server%20Applications%2015%20SP5
< 9.5.0-7.el9_3.alma.1+ 34 more
- (no CPE)range: < 9.5.0-7.el9_3.alma.1
- (no CPE)range: < 9.5.0-7.el9_3.alma.1
- (no CPE)range: < 9.5.0-7.el9_3.alma.1
- (no CPE)range: < 9.5.0-7.el9_3.alma.1
- (no CPE)range: < 9.5.0-7.el9_3.alma.1
- (no CPE)range: < 9.5.0-7.el9_3.alma.1
- (no CPE)range: < 9.5.0-7.el9_3.alma.1
- (no CPE)range: < 9.5.0-7.el9_3.alma.1
- (no CPE)range: < 9.5.0-7.el9_3.alma.1
- (no CPE)range: < 9.5.0-7.el9_3.alma.1
- (no CPE)range: < 9.5.0-7.el9_3.alma.1
- (no CPE)range: < 9.5.0-7.el9_3.alma.1
- (no CPE)range: < 9.5.0-7.el9_3.alma.1
- (no CPE)range: < 9.5.0-7.el9_3.alma.1
- (no CPE)range: < 9.5.0-7.el9_3.alma.1
- (no CPE)range: < 9.5.0-7.el9_3.alma.1
- (no CPE)range: < 9.5.0-7.el9_3.alma.1
- (no CPE)range: < 9.5.0-7.el9_3.alma.1
- (no CPE)range: < 9.5.0-7.el9_3.alma.1
- (no CPE)range: < 9.5.0-7.el9_3.alma.1
- (no CPE)range: < 9.5.0-7.el9_3.alma.1
- (no CPE)range: < 9.5.0-7.el9_3.alma.1
- (no CPE)range: < 9.5.0-7.el9_3.alma.1
- (no CPE)range: < 9.5.0-7.el9_3.alma.1
- (no CPE)range: < 9.5.0-7.el9_3.alma.1
- (no CPE)range: < 9.5.0-7.el9_3.alma.1
- (no CPE)range: < 9.5.0-7.el9_3.alma.1
- (no CPE)range: < 9.5.0-7.el9_3.alma.1
- (no CPE)range: < 9.5.0-7.el9_3.alma.1
- (no CPE)range: < 9.5.0-7.el9_3.alma.1
- (no CPE)range: < 9.5.0-7.el9_3.alma.1
- (no CPE)range: < 9.0.0-150500.6.11.1
- (no CPE)range: < 9.5.0-2.1
- (no CPE)range: < 9.0.0-150500.6.11.1
- (no CPE)range: < 9.0.0-150500.6.11.1
Patches
Vulnerability mechanics
References
3- access.redhat.com/errata/RHSA-2023:6409mitrevendor-advisoryx_refsource_REDHAT
- access.redhat.com/security/cve/CVE-2023-3750mitrevdb-entryx_refsource_REDHAT
- bugzilla.redhat.com/show_bug.cgimitreissue-trackingx_refsource_REDHAT
News mentions
0No linked articles in our index yet.