CVE-2021-3631CWE-732

A flaw was found in libvirt while it generates SELinux MCS category pairs for VMs' dynamic labels

published March 2, 2022

CVSS
—
EPSS
0%
Percentile
41.4
In the wild
Unconfirmed
What it is

A flaw was found in libvirt while it generates SELinux MCS category pairs for VMs' dynamic labels. This flaw allows one exploited guest to access files labeled for another guest, resulting in the breaking out of sVirt confinement. The highest threat from this vulnerability is to confidentiality and integrity.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00493 · 41.4th percentile
Weakness
CWE-732 · Incorrect Permission Assignment for Critical Resource
Published
2022-03-02T00:00Z
EPSS history
Timeline
  • 02 MAR 00:00Z
    A flaw was found in libvirt while it generates SELinux MCS category pairs for VMs' dynamic labels
    cvelistv5