A flaw was found in libvirt. A refactor of the code fetching the list of interfaces for multiple APIs introduced a corner case on platforms where allocating 0 bytes of memory results in a NULL pointer. This corner case would lead to a NULL-pointer dereference and subsequent crash of virtinterfaced. This issue could allow clients connecting to the read-only socket to crash the virtinterfaced daemon.
CVSS Details
- CVSS 3.1 Base Score: 6.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libvirt-daemonUpgrade libvirt-daemon-logUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-plugin-lockdUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-develUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-commonUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-libsUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-nodedevUpgrade libvirtUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-docsUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-proxyUpgrade libvirt-daemon-driver-secretUpgrade libvirt-ssh-proxyUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-clientUpgrade libvirt-daemon-lockUpgrade libvirt-nssUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-client-qemuUpgrade libvirt-daemon-plugin-sanlock | Nov 19, 2024 | Aug 30, 2024 |
| Alpine Linux | — | Upgrade libvirt | Oct 1, 2024 | Aug 30, 2024 |
| Debian | — | Upgrade libvirt | Jul 27, 2026 | Jul 27, 2026 |
| Oracle_linux | — | Upgrade libvirt-daemon-kvmUpgrade libvirt-client-qemuUpgrade libvirt-docsUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-clientUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirtUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-ssh-proxyUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-nssUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-proxyUpgrade libvirt-daemon-plugin-sanlockUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-config-networkUpgrade libvirt-develUpgrade libvirt-daemon-logUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-commonUpgrade libvirt-libsUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-lockUpgrade libvirt-daemon-plugin-lockdUpgrade libvirt-daemon-driver-storage | Nov 21, 2024 | Aug 29, 2024 |
| Redhat_linux | — | Upgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-debuginfoUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade libvirt-nssUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-plugin-lockdUpgrade libvirt-daemon-plugin-sanlockUpgrade libvirt-debugsourceUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade libvirt-daemon-lock-debuginfoUpgrade libvirt-libs-debuginfoUpgrade libvirt-clientUpgrade libvirt-daemon-driver-networkUpgrade libvirt-client-debuginfoUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libvirt-daemon-proxyUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libvirt-daemon-lockUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-libsUpgrade libvirt-daemon-plugin-sanlock-debuginfoUpgrade libvirt-debuginfoUpgrade libvirt-ssh-proxy-debuginfoUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade libvirt-nss-debuginfoUpgrade libvirt-daemon-logUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade libvirt-daemon-common-debuginfoUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirtUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-ssh-proxyUpgrade libvirt-daemon-log-debuginfoUpgrade libvirt-client-qemuUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-wireshark-debuginfoUpgrade libvirt-daemon-proxy-debuginfoUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade libvirt-develUpgrade libvirt-daemon-driver-network-debuginfoUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade libvirt-daemon-plugin-lockd-debuginfoUpgrade libvirt-docsUpgrade libvirt-daemon-commonUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon | Nov 13, 2024 | Aug 30, 2024 |
| Rocky_linux | — | Upgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-network-debuginfoUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade libvirt-daemon-proxyUpgrade libvirt-debuginfoUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-plugin-lockdUpgrade libvirt-ssh-proxy-debuginfoUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-lockUpgrade libvirtUpgrade libvirt-daemon-driver-networkUpgrade libvirt-nss-debuginfoUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade libvirt-debugsourceUpgrade libvirt-client-debuginfoUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-client-qemuUpgrade libvirt-nssUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-logUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade libvirt-develUpgrade libvirt-docsUpgrade libvirt-daemon-plugin-sanlockUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-debuginfoUpgrade libvirt-daemon-common-debuginfoUpgrade libvirt-daemon-commonUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-proxy-debuginfoUpgrade libvirt-daemon-log-debuginfoUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-ssh-proxyUpgrade libvirt-daemon-lock-debuginfoUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-clientUpgrade libvirt-daemon-driver-secretUpgrade libvirt-libs-debuginfoUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemonUpgrade libvirt-daemon-plugin-lockd-debuginfoUpgrade libvirt-libsUpgrade libvirt-daemon-plugin-sanlock-debuginfoUpgrade libvirt-daemon-kvm | Mar 18, 2025 | Aug 30, 2024 |
| Suse | — | Upgrade libvirt-daemon-driver-libxlUpgrade libvirt-daemon-driver-storageUpgrade libvirt-ssh-proxyUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemonUpgrade libvirt-nssUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-commonUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-develUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-clientUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-plugin-sanlockUpgrade libvirt-daemon-xenUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-client-qemuUpgrade libvirt-daemon-hooksUpgrade libvirt-daemon-logUpgrade libvirt-daemon-qemuUpgrade libvirt-daemon-plugin-lockdUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-lockUpgrade libvirt-daemon-driver-networkUpgrade libvirtUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-libsUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-proxyUpgrade libvirt-docUpgrade libvirt-daemon-driver-storage-iscsi-direct | Dec 5, 2025 | Nov 21, 2024 |
| Ubuntu | — | Upgrade libvirt | Nov 19, 2024 | Aug 30, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub