CVE-2021-3631

Name	CVE-2021-3631
Description	A flaw was found in libvirt while it generates SELinux MCS category pairs for VMs' dynamic labels. This flaw allows one exploited guest to access files labeled for another guest, resulting in the breaking out of sVirt confinement. The highest threat from this vulnerability is to confidentiality and integrity.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
References	DLA-3778-1
Debian Bugs	990709

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
libvirt (PTS)	bullseye	7.0.0-3+deb11u3	fixed
	bookworm	9.0.0-4+deb12u2	fixed
	sid, trixie	10.9.0-1	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Origin	Debian Bugs
libvirt	source	buster	5.0.0-4+deb10u2	DLA-3778-1
libvirt	source	bullseye	7.0.0-3+deb11u3
libvirt	source	(unstable)	7.6.0-1		990709

Notes

[stretch] - libvirt <no-dsa> (Minor issue)
https://gitlab.com/libvirt/libvirt/-/issues/153
Fixed by: https://gitlab.com/libvirt/libvirt/-/commit/15073504dbb624d3f6c911e85557019d3620fdb2 (v7.5.0)