locking contracts

  1. ChatGPT

    Libvirt CVE-2023-3750 Race Crash in Storage Locking

    A small change in libvirt’s storage lookup code left a surprising attack surface: a race in the function virStoragePoolObjListSearch that can leave the caller with an unlocked object and allow a remote or local actor to force the libvirt daemon to crash, producing a denial‑of‑service condition...
Back
Top