CVE-2021-3631

MediumCVSS 6.3/10Last modified Jun 17, 2026

Description

A flaw was found in libvirt while it generates SELinux MCS category pairs for VMs' dynamic labels. This flaw allows one exploited guest to access files labeled for another guest, resulting in the breaking out of sVirt confinement. The highest threat from this vulnerability is to confidentiality and integrity.

Metrics

CVSS 3.1 6.3/10CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

Weakness enumeration

CWE-732

Affected software

Vendor	Product	Versions
n/a	libvirt	Fixed-In - libvirt v7.5.0

References

https://access.redhat.com/errata/RHSA-2021:3631Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1977726Issue Tracking, Vendor Advisory
https://gitlab.com/libvirt/libvirt/-/commit/15073504dbb624d3f6c911e85557019d3620fdb2Patch, Third Party Advisory
https://gitlab.com/libvirt/libvirt/-/issues/153Exploit, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2024/04/msg00000.html
https://security.gentoo.org/glsa/202210-06Third Party Advisory
https://security.netapp.com/advisory/ntap-20220331-0010/Third Party Advisory
https://access.redhat.com/errata/RHSA-2021:3631Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1977726Issue Tracking, Vendor Advisory
https://gitlab.com/libvirt/libvirt/-/commit/15073504dbb624d3f6c911e85557019d3620fdb2Patch, Third Party Advisory
https://gitlab.com/libvirt/libvirt/-/issues/153Exploit, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2024/04/msg00000.html
https://security.gentoo.org/glsa/202210-06Third Party Advisory
https://security.netapp.com/advisory/ntap-20220331-0010/Third Party Advisory

Timeline

Published: Mar 2, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-363104.9Dell Networking OS10, versions 10.4.3.x, 10.5.0.x, 10.5.1.x & 10.5.2.x, contain an uncontrolled resource consumption flaw in its API service CVE-2021-363117.8Dell EMC Networker versions prior to 19.5 contain an Improper Authorization vulnerability. Any local malicious user with networker user priv CVE-2021-363129.1Dell EMC CloudLink 7.1 and all prior versions contain a Hard-coded Password Vulnerability. A remote high privileged attacker, with the knowl CVE-2021-363137.2Dell EMC CloudLink 7.1 and all prior versions contain an OS command injection Vulnerability. A remote high privileged attacker, may potentia CVE-2021-363149.8Dell EMC CloudLink 7.1 and all prior versions contain an Arbitrary File Creation Vulnerability. A remote unauthenticated attacker, may poten CVE-2021-363156.8Dell EMC PowerScale Nodes contain a hardware design flaw. This may allow a local unauthenticated user to escalate privileges. This also affe CVE-2021-363167.2Dell EMC Avamar Server versions 18.2, 19.1, 19.2, 19.3, and 19.4 contain an improper privilege management vulnerability in AUI. A malicious CVE-2021-363176.7Dell EMC Avamar Server version 19.4 contains a plain-text password storage vulnerability in AvInstaller. A local attacker could potentially CVE-2021-363186.7Dell EMC Avamar versions 18.2,19.1,19.2,19.3,19.4 contain a plain-text password storage vulnerability. A high privileged user could potentia CVE-2021-363193.3Dell Networking OS10 versions 10.4.3.x, 10.5.0.x and 10.5.1.x contain an information exposure vulnerability. A low privileged authenticated CVE-2021-36327.5A flaw was found in Keycloak. This vulnerability allows anyone to register a new security device or key when there is not a device already r CVE-2021-363209.8Dell Networking X-Series firmware versions prior to 3.0.1.8 contain an authentication bypass vulnerability. A remote unauthenticated attacke