Libvirt Security Notice: LSN-2020-0003

Leak of /dev/mapper/control into QEMU guest namespace

Lifecycle

Credits

See also

• CVE-2020-10703

Description

The libvirt code popuplating the /dev tree in the QEMU guest's namespace was using libdevmapper to get the full dependency tree.

Impact

An open file descriptor to /dev/mapper/control was leaked to QEMU's guest namespace.

Workaround

There is no known workaround for this issue.

Affected product: libvirt

Alternative formats: [xml] [text]