CVE catalog

CVE-2023-3750

libvirt: CVE-2023-3750

Severity: Medium · CVSS 6.5CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Published: Jul 18, 2023, 12:00:00 AM UTC
Source: [NVD] · [CVE record]
EPSS: 0.76% · Oct 27, 2026

A flaw was found in libvirt. The virStoragePoolObjListSearch function does not return a locked pool as expected, resulting in a race condition and denial of service when attempting to lock the same object from another thread. This issue could allow clients connecting to the read-only socket to crash the libvirt daemon.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	libvirt	sid	`12.8.0-1`	fixed
Debian	libvirt	forky	`12.8.0-1`	fixed
Debian	libvirt	trixie	`11.3.0-3+deb13u3`	fixed
Debian	libvirt	bookworm	`9.0.0-4+deb12u2`	fixed
Suse	libvirt	linux enterprise module for basesystem 15 sp5	`9.0.0-150500.6.11.1`	fixed
Suse	libvirt	linux enterprise module for server applications 15 sp5	`9.0.0-150500.6.11.1`	fixed
Opensuse	libvirt	leap 15.5	`9.0.0-150500.6.11.1`	fixed
Opensuse	libvirt	tumbleweed	`9.5.0-2.1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	libvirt	source	sid	`9.6.0-1`	not yet assigned	Not reported	[1041811]
Debian	libvirt	source	forky	`9.6.0-1`	not yet assigned	Not reported	[1041811]
Debian	libvirt	source	trixie	`9.6.0-1`	not yet assigned	Not reported	[1041811]
Debian	libvirt	source	bookworm	`9.0.0-4+deb12u1`	not yet assigned	Not reported	[1041811]
Suse	libvirt	rpm	linux enterprise module for basesystem 15 sp5	`9.0.0-150500.6.11.1`	Not reported	SUSE-SU-2023:3043-1	Not reported
Suse	libvirt	rpm	linux enterprise module for server applications 15 sp5	`9.0.0-150500.6.11.1`	Not reported	SUSE-SU-2023:3043-1	Not reported
Opensuse	libvirt	rpm	leap 15.5	`9.0.0-150500.6.11.1`	Not reported	SUSE-SU-2023:3043-1	Not reported
Opensuse	libvirt	rpm	tumbleweed	`9.5.0-2.1`	Not reported	OPENSUSE-SU-2024:13061-1	Not reported

[Debian bug #1041811]

OpenFactory catalog packages

[openSUSE Tumbleweed]

[libvirt-client]Unknown
Source package: [libvirt]
Details (1)
- 12.6.0-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 9.5.0-2.1
  Version impact unknown
  dsa · libvirt · opensuse · tumbleweed
[libvirt-client-qemu]Unknown
Source package: [libvirt]
Details (1)
- 12.6.0-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 9.5.0-2.1
  Version impact unknown
  dsa · libvirt · opensuse · tumbleweed
[libvirt-daemon]Unknown
Source package: [libvirt]
Details (1)
- 12.6.0-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 9.5.0-2.1
  Version impact unknown
  dsa · libvirt · opensuse · tumbleweed
[libvirt-daemon-common]Unknown
Source package: [libvirt]
Details (1)
- 12.6.0-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 9.5.0-2.1
  Version impact unknown
  dsa · libvirt · opensuse · tumbleweed
[libvirt-daemon-config-network]Unknown
Source package: [libvirt]
Details (1)
- 12.6.0-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 9.5.0-2.1
  Version impact unknown
  dsa · libvirt · opensuse · tumbleweed
[libvirt-daemon-config-nwfilter]Unknown
Source package: [libvirt]
Details (1)
- 12.6.0-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 9.5.0-2.1
  Version impact unknown
  dsa · libvirt · opensuse · tumbleweed
[libvirt-daemon-driver-libxl]Unknown
Source package: [libvirt]
Details (1)
- 12.6.0-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 9.5.0-2.1
  Version impact unknown
  dsa · libvirt · opensuse · tumbleweed
[libvirt-daemon-driver-lxc]Unknown
Source package: [libvirt]
Details (1)
- 12.6.0-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 9.5.0-2.1
  Version impact unknown
  dsa · libvirt · opensuse · tumbleweed
[libvirt-daemon-driver-network]Unknown
Source package: [libvirt]
Details (1)
- 12.6.0-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 9.5.0-2.1
  Version impact unknown
  dsa · libvirt · opensuse · tumbleweed
[libvirt-daemon-driver-nodedev]Unknown
Source package: [libvirt]
Details (1)
- 12.6.0-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 9.5.0-2.1
  Version impact unknown
  dsa · libvirt · opensuse · tumbleweed
[libvirt-daemon-driver-nwfilter]Unknown
Source package: [libvirt]
Details (1)
- 12.6.0-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 9.5.0-2.1
  Version impact unknown
  dsa · libvirt · opensuse · tumbleweed
[libvirt-daemon-driver-qemu]Unknown
Source package: [libvirt]
Details (1)
- 12.6.0-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 9.5.0-2.1
  Version impact unknown
  dsa · libvirt · opensuse · tumbleweed
[libvirt-daemon-driver-secret]Unknown
Source package: [libvirt]
Details (1)
- 12.6.0-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 9.5.0-2.1
  Version impact unknown
  dsa · libvirt · opensuse · tumbleweed
[libvirt-daemon-driver-storage]Unknown
Source package: [libvirt]
Details (1)
- 12.6.0-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 9.5.0-2.1
  Version impact unknown
  dsa · libvirt · opensuse · tumbleweed
[libvirt-daemon-driver-storage-core]Unknown
Source package: [libvirt]
Details (1)
- 12.6.0-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 9.5.0-2.1
  Version impact unknown
  dsa · libvirt · opensuse · tumbleweed
[libvirt-daemon-driver-storage-disk]Unknown
Source package: [libvirt]
Details (1)
- 12.6.0-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 9.5.0-2.1
  Version impact unknown
  dsa · libvirt · opensuse · tumbleweed
[libvirt-daemon-driver-storage-iscsi]Unknown
Source package: [libvirt]
Details (1)
- 12.6.0-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 9.5.0-2.1
  Version impact unknown
  dsa · libvirt · opensuse · tumbleweed
[libvirt-daemon-driver-storage-iscsi-direct]Unknown
Source package: [libvirt]
Details (1)
- 12.6.0-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 9.5.0-2.1
  Version impact unknown
  dsa · libvirt · opensuse · tumbleweed
[libvirt-daemon-driver-storage-logical]Unknown
Source package: [libvirt]
Details (1)
- 12.6.0-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 9.5.0-2.1
  Version impact unknown
  dsa · libvirt · opensuse · tumbleweed
[libvirt-daemon-driver-storage-mpath]Unknown
Source package: [libvirt]
Details (1)
- 12.6.0-2.1 · x86_64 · tumbleweed
  Unknown · Fixed: 9.5.0-2.1
  Version impact unknown
  dsa · libvirt · opensuse · tumbleweed

Next results

Observed: Oct 28, 2026, 5:44:50 PM UTC

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]