A flaw was found in libvirt. A refactor of the code fetching the list of interfaces for multiple APIs introduced a corner case on platforms where allocating 0 bytes of memory results in a NULL pointer. This corner case would lead to a NULL-pointer dereference and subsequent crash of virtinterfaced. This issue could allow clients connecting to the read-only socket to crash the virtinterfaced daemon.
CVSS Details
- CVSS 3.1 Base Score: 6.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-clientUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-proxyUpgrade libvirt-daemon-driver-networkUpgrade libvirt-docsUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-lockUpgrade libvirt-nssUpgrade libvirt-libsUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-client-qemuUpgrade libvirt-daemon-kvmUpgrade libvirtUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-ssh-proxyUpgrade libvirt-daemon-plugin-sanlockUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-plugin-lockdUpgrade libvirt-daemon-commonUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-develUpgrade libvirt-daemon-log | Nov 19, 2024 | Aug 30, 2024 |
| Alpine Linux | — | Upgrade libvirt | Oct 1, 2024 | Aug 30, 2024 |
| Debian | — | Upgrade libvirt | Jul 27, 2026 | Jul 27, 2026 |
| Oracle_linux | — | Upgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-logUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-plugin-lockdUpgrade libvirt-libsUpgrade libvirt-daemon-commonUpgrade libvirt-daemon-lockUpgrade libvirt-develUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemonUpgrade libvirt-daemon-kvmUpgrade libvirt-ssh-proxyUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-plugin-sanlockUpgrade libvirtUpgrade libvirt-daemon-proxyUpgrade libvirt-nssUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-clientUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-client-qemuUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-config-networkUpgrade libvirt-docs | Nov 21, 2024 | Aug 29, 2024 |
| Redhat_linux | — | Upgrade libvirt-daemon-driver-secret-debuginfoUpgrade libvirt-ssh-proxy-debuginfoUpgrade libvirt-daemon-plugin-sanlock-debuginfoUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-debuginfoUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade libvirt-daemon-plugin-lockd-debuginfoUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-network-debuginfoUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-commonUpgrade libvirt-develUpgrade libvirt-docsUpgrade libvirt-ssh-proxyUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-log-debuginfoUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-proxy-debuginfoUpgrade libvirt-nss-debuginfoUpgrade libvirt-wireshark-debuginfoUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade libvirt-daemon-logUpgrade libvirt-client-qemuUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-common-debuginfoUpgrade libvirtUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-libsUpgrade libvirt-daemon-proxyUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade libvirt-daemon-plugin-lockdUpgrade libvirt-daemon-debuginfoUpgrade libvirt-daemon-lock-debuginfoUpgrade libvirt-clientUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-lockUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-debugsourceUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libvirt-daemon-plugin-sanlockUpgrade libvirt-daemon-kvmUpgrade libvirt-client-debuginfoUpgrade libvirt-libs-debuginfoUpgrade libvirt-nssUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-storage-disk-debuginfo | Nov 13, 2024 | Aug 30, 2024 |
| Rocky_linux | — | Upgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-libsUpgrade libvirt-nssUpgrade libvirt-docsUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-libs-debuginfoUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-commonUpgrade libvirt-daemon-debuginfoUpgrade libvirt-daemon-logUpgrade libvirt-daemonUpgrade libvirt-daemon-plugin-lockd-debuginfoUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade libvirt-daemon-plugin-sanlock-debuginfoUpgrade libvirt-develUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-plugin-sanlockUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade libvirt-daemon-common-debuginfoUpgrade libvirt-daemon-lock-debuginfoUpgrade libvirt-ssh-proxyUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade libvirt-clientUpgrade libvirt-client-qemuUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-log-debuginfoUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-proxy-debuginfoUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-lockUpgrade libvirt-daemon-driver-network-debuginfoUpgrade libvirt-debugsourceUpgrade libvirt-nss-debuginfoUpgrade libvirt-daemon-proxyUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade libvirt-ssh-proxy-debuginfoUpgrade libvirt-daemon-plugin-lockdUpgrade libvirtUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-debuginfoUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade libvirt-client-debuginfoUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-nodedev-debuginfo | Mar 18, 2025 | Aug 30, 2024 |
| Suse | — | Upgrade libvirt-daemon-proxyUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-logUpgrade libvirt-daemon-qemuUpgrade libvirt-daemon-plugin-lockdUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-docUpgrade libvirt-daemon-lockUpgrade libvirt-libsUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade libvirtUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-develUpgrade libvirt-daemon-xenUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-plugin-sanlockUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-commonUpgrade libvirt-ssh-proxyUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-clientUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-libxlUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-client-qemuUpgrade libvirt-nssUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-hooks | Dec 5, 2025 | Nov 21, 2024 |
| Ubuntu | — | Upgrade libvirt | Nov 19, 2024 | Aug 30, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub