ALBA-2021:2573 sanlock bug fix and enhancement update
A bug in sanlock caused closed connections and released leases upon receiving bad client messages, potentially disrupting shared storage synchronization.
- Exploited in the wild
- Not known
- Login needed
- Not stated
- Attackable
- Not stated
- Victim action needed
- Not stated
- Fix
- Available
What is ALBA-2021:2573?
ALBA-2021:2573 is a vulnerability in sanlock-devel, published on 29 Jun 2021.
Official description
The sanlock packages provide a shared storage lock manager. Hosts with shared access to a block device or a file can use sanlock to synchronize their activities. VDSM and libvirt use sanlock to synchronize access to shared devices or files.
Bug Fix(es) and Enhancement(s):
bad client message causes closed connection and released leases (BZ#1965481)
Expose sanlock_inquire() in python bindings (BZ#1965483)
Which versions are affected by ALBA-2021:2573?
Linux distribution packages (1)
sanlock-devel AlmaLinux:8 | All versions | 3.8.3-3.el8_4 |
How do I fix ALBA-2021:2573?
Apply the vendor's patch.
Is ALBA-2021:2573 being exploited?
There is no known exploitation of ALBA-2021:2573 in the wild and no public exploit code.