CVE-2023-3750 MEDIUM

CVE-2023-3750: Libvirt: improper locking in virstoragepoolobjlistsearch may lead to denial of service

Vendor Red Hat
Product Red Hat Enterprise Linux 6
Weakness CWE-667
Published July 24, 2023
Last update November 8, 2025
View on NVD All CVEs

CVSS base score

6.5/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality None
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

What the vulnerability does

01Description

A flaw was found in libvirt. The virStoragePoolObjListSearch function does not return a locked pool as expected, resulting in a race condition and denial of service when attempting to lock the same object from another thread. This issue could allow clients connecting to the read-only socket to crash the libvirt daemon.

Key dates

02Disclosure timeline

July 24, 2023 CVE published
November 8, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2026-20065 Multiple Cisco Products Snort 3 TBD Denial of Service Vulnerability CVE-2021-22530 Improper account management vulnerability in NetIQ Advance Authentication CVE-2023-22412 Junos OS: MX Series and SRX Series: The flow processing daemon (flowd) will crash if the SIP ALG is enabled and specific SIP messages are processed CVE-2024-32648 vyper default functions don't respect nonreentrancy keys CVE-2022-22175 Junos OS: MX Series and SRX Series: The flowd daemon will crash if the SIP ALG is enabled and specific SIP messages are processed