<security-notice xmlns="http://security.libvirt.org/xmlns/security-notice/1.0">
  <id>2023-0001</id>

  <summary>race condition leading to a crash in 'virStoragePoolObjListSearch'</summary>

  <description>
<![CDATA[Refactor of locking in 'virStoragePoolObjListSearch' caused the callers
         to access storage pool objects without holding a corresponding lock.
         In cases when the object would be at the same time modified by another
         thread this could lead to a crash.]]>
  </description>

  <impact>
<![CDATA[Unprivileged users using the read-only connection may crash the libvirt daemon.]]>
  </impact>

  <workaround>
<![CDATA[None]]>
  </workaround>

  <credits>
    <reporter>
      <name>Han Han</name>
      <email>hhan@redhat.com</email>
    </reporter>
    <patcher>
      <name>Peter Krempa</name>
      <email>pkrempa@redhat.com</email>
    </patcher>
  </credits>

  <lifecycle>
    <reported>20230711</reported>
    <published>20230720</published>
    <fixed>20230720</fixed>
  </lifecycle>

  <reference>
    <advisory type="CVE" id="2023-3750"/>
  </reference>

  <product name="libvirt">
    <repository>libvirt.git</repository>
    <branch>
      <name>master</name>
      <tag state="vulnerable">v8.3.0</tag>
      <tag state="vulnerable">v8.4.0</tag>
      <tag state="vulnerable">v8.5.0</tag>
      <tag state="vulnerable">v8.6.0</tag>
      <tag state="vulnerable">v8.7.0</tag>
      <tag state="vulnerable">v8.8.0</tag>
      <tag state="vulnerable">v8.9.0</tag>
      <tag state="vulnerable">v8.10.0</tag>
      <tag state="vulnerable">v9.0.0</tag>
      <tag state="vulnerable">v9.1.0</tag>
      <tag state="vulnerable">v9.2.0</tag>
      <tag state="vulnerable">v9.3.0</tag>
      <tag state="vulnerable">v9.4.0</tag>
      <tag state="vulnerable">v9.5.0</tag>
      <change state="vulnerable">0c4b391e2a9</change>
      <tag state="fixed">v9.6.0</tag>
      <change state="fixed">9a47442366fcf8a7b6d7422016d7bbb6764a1098</change>
    </branch>
  </product>

</security-notice>
