Libvirt Security Notice: LSN-2021-0003

Denial of service by malicious guest in the libxl driver

Lifecycle

Reported on:	20211123
Published on:	20211202
Fixed on:	20211202

Credits

Reported by:	Jim Fehlig
Patched by:	Jim Fehlig

See also

• CVE-2021-4147

Description

Possible deadlock when the guest is being shut down

Impact

A malicious guest could continuously reboot itself and cause libvirtd on the host to deadlock or crash, resulting in a denial of service condition.

Workaround

None.

Affected product: libvirt

---

Alternative formats: [xml] [text]