CVE-2021-3975
Summary
| CVE | CVE-2021-3975 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2022-08-23 20:15:00 UTC |
|---|
| Updated | 2024-04-01 13:16:00 UTC |
|---|
| Description | A use-after-free flaw was found in libvirt. The qemuMonitorUnregister() function in qemuProcessHandleMonitorEOF is called using multiple threads without being adequately protected by a monitor lock. This flaw could be triggered by the virConnectGetAllDomainStats API when the guest is shutting down. An unprivileged client with a read-only connection could use this flaw to perform a denial of service attack by causing the libvirt daemon to crash. |
|---|
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| CVE-2021-3975 | Ubuntu |
MISC |
ubuntu.com |
|
| [debian-lts-announce] 20240401 [SECURITY] [DLA 3778-1] libvirt security update |
|
lists.debian.org |
|
| qemu: Add missing lock in qemuProcessHandleMonitorEOF · libvirt/libvirt@1ac703a · GitHub |
MISC |
github.com |
|
| 2024326 – (CVE-2021-3975) CVE-2021-3975 libvirt: segmentation fault during VM shutdown can lead to vdsm hang |
MISC |
bugzilla.redhat.com |
|
| CVE-2021-3975 Libvirt Vulnerability in NetApp Products | NetApp Product Security |
CONFIRM |
security.netapp.com |
|
| Red Hat Customer Portal - Access to 24x7 support and knowledge |
MISC |
access.redhat.com |
|
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 159858 Oracle Enterprise Linux Security Update for virt:ol and virt-devel:ol (ELSA-2022-1759)
- 160002 Oracle Enterprise Linux Security Update for libvirt libvirt-python (ELSA-2022-9668)
- 160027 Oracle Enterprise Linux Security Update for virt:kvm_utils (ELSA-2022-9700)
- 182886 Debian Security Update for libvirt (CVE-2021-3975)
- 198763 Ubuntu Security Notification for libvirt Vulnerabilities (USN-5399-1)
- 240292 Red Hat Update for virt:rhel and virt-devel:rhel security (RHSA-2022:1759)
- 6000552 Debian Security Update for libvirt (DLA 3778-1)
- 751580 SUSE Enterprise Linux Security Update for libvirt (SUSE-SU-2022:0031-1)
- 751581 SUSE Enterprise Linux Security Update for libvirt (SUSE-SU-2022:0032-1)
- 751585 SUSE Enterprise Linux Security Update for libvirt (SUSE-SU-2022:0041-1)
- 751586 SUSE Enterprise Linux Security Update for libvirt (SUSE-SU-2022:0042-1)
- 751588 SUSE Enterprise Linux Security Update for libvirt (SUSE-SU-2022:0045-1)
- 751620 SUSE Enterprise Linux Security Update for libvirt (SUSE-SU-2022:0128-1)
- 903768 Common Base Linux Mariner (CBL-Mariner) Security Update for libvirt (10645)
- 904201 Common Base Linux Mariner (CBL-Mariner) Security Update for libvirt (10645-1)
- 940525 AlmaLinux Security Update for virt:rhel and virt-devel:rhel (ALSA-2022:1759)
- 960314 Rocky Linux Security Update for virt:rhel and virt-devel:rhel (RLSA-2022:1759)
