CVE-2022-0897: Netapp Ontap Select Deploy Administration Utility

Medium severity, CVSS 4.3. EPSS: 1% chance of exploitation in the next 30 days.

A flaw was found in the libvirt nwfilter driver. The virNWFilterObjListNumOfNWFilters method failed to acquire the driver->nwfilters mutex before iterating over virNWFilterObj instances. There was no protection to stop another thread from concurrently modifying the driver->nwfilters object. This flaw allows a malicious, unprivileged user to exploit this issue via libvirt's API virConnectNumOfNWFilters to crash the network filter management daemon (libvirtd/virtnwfilterd).

Affected products

• Netapp Ontap Select Deploy Administration Utility: affected versions not specified
• Red Hat Libvirt: up to and including 1.1.1

Published 2022-03-25. Last modified 2026-06-17.