CVE-2022-0897

Name of the Vulnerable Software and Affected Versions libvirt (affected versions not specified)

Description The issue is related to insufficient locking in the virNWFilterObjListNumOfNWFilters method of the libvirt library. This allows a malicious, unprivileged user to exploit the issue via libvirt's API virConnectNumOfNWFilters to crash the network filter management daemon (libvirtd/virtnwfilterd). The flaw is due to the method failing to acquire the driver->nwfilters mutex before iterating over virNWFilterObj instances, leaving no protection against concurrent modification of the driver->nwfilters object by another thread.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.