6.5

CVE-2023-3750: redhat enterprise_linux Improper Locking

CVSS: 6.5v3.1MediumModified
AliasesSUSE-SU-2023:3043-1RHSA-2023:6409UBUNTU-CVE-2023-3750
Published 24-07-2023Last modified 08-11-2025
Open JSON

Vulnerability summary

CVE-2023-3750 is a medium (CVSS 6.5) Improper Locking vulnerability in redhat enterprise_linux. EPSS estimates a 0.76% chance of exploitation in the next 30 days, higher than 54.4% of scored vulnerabilities.

Overall risk
26/100
0100
Medium · default modelHow is this calculated?
CVSS score
6.5/10
010
Medium · v3.1 (CVE.org)
EPSS score
0.76%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Timeline

  1. 24-07-2023
    PublishedVulnerability first disclosed.
  2. 08-11-2025
    Last modifiedVulnerability information updated.

Description

A flaw was found in libvirt. The virStoragePoolObjListSearch function does not return a locked pool as expected, resulting in a race condition and denial of service when attempting to lock the same object from another thread. This issue could allow clients connecting to the read-only socket to crash the libvirt daemon.

CVSS metrics

5 scores · 5 sources · 1 version

EPSS trend

Probability

0.76%

Chance of exploitation in the next 30 days

Percentile

54%

Versus all other CVEs

30-day change

0.00 pp

From 0.76% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.76%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Redhat59 products
  • enterprise_linux9.0
  • libvirtna
  • libvirt< 0:9.5.0-7.el9_3
  • libvirt-client< 0:9.5.0-7.el9_3
  • libvirt-client-debuginfo< 0:9.5.0-7.el9_3
Opensuse2 products
  • libvirt&distro=openSUSE Leap 15.5< 9.0.0-150500.6.11.1
  • libvirt&distro=openSUSE Tumbleweed< 9.5.0-2.1
Suse2 products
  • libvirt&distro=SUSE Linux Enterprise Module for Basesystem 15 SP5< 9.0.0-150500.6.11.1
  • libvirt&distro=SUSE Linux Enterprise Module for Server Applications 15 SP5< 9.0.0-150500.6.11.1
Debian1 product
  • libvirt< 9.0.0-4+deb12u1 | < 9.6.0-1
Ubuntu1 product
  • libvirt< 6.0.0-0ubuntu8.16 | < 8.0.0-1ubuntu7.6

5 vendors · 65 products

References

73 links
Show all 73 references