Not rated
CVE-2021-3631 A flaw was found in libvirt while it generates SELinux MCS category pairs for VMs' dynamic labels
Description
A flaw was found in libvirt while it generates SELinux MCS category pairs for VMs' dynamic labels. This flaw allows one exploited guest to access files labeled for another guest, resulting in the breaking out of sVirt confinement. The highest threat from this vulnerability is to confidentiality and integrity.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| libvirt | Versions not published |
References
- bugzilla.redhat.com bugzilla.redhat.com
- gitlab.com gitlab.com
- gitlab.com gitlab.com
- access.redhat.com access.redhat.com
- security.netapp.com security.netapp.com
- GLSA-202210-06 security.gentoo.org
- [debian-lts-announce] 20240401 [SECURITY] [DLA 3778-1] libvirt security update lists.debian.org
Timeline
- Published
- Last modified