A flaw was found in libvirt. A refactor of the code fetching the list of interfaces for multiple APIs introduced a corner case on platforms where allocating 0 bytes of memory results in a NULL pointer. This corner case would lead to a NULL-pointer dereference and subsequent crash of virtinterfaced. This issue could allow clients connecting to the read-only socket to crash the virtinterfaced daemon.
CVSS Details
- CVSS 3.1 Base Score: 6.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-client-qemuUpgrade libvirt-daemon-proxyUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-nssUpgrade libvirt-daemon-lockUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirtUpgrade libvirt-docsUpgrade libvirt-daemon-driver-networkUpgrade libvirt-clientUpgrade libvirt-libsUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-plugin-sanlockUpgrade libvirt-ssh-proxyUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-develUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-logUpgrade libvirt-daemon-commonUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-plugin-lockd | Nov 19, 2024 | Aug 30, 2024 |
| Alpine Linux | — | Upgrade libvirt | Oct 1, 2024 | Aug 30, 2024 |
| Debian | — | Upgrade libvirt | Jul 27, 2026 | Jul 27, 2026 |
| Oracle_linux | — | Upgrade libvirt-daemon-logUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-lockUpgrade libvirt-libsUpgrade libvirt-daemon-commonUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-plugin-lockdUpgrade libvirt-develUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-proxyUpgrade libvirtUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-nssUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-client-qemuUpgrade libvirt-ssh-proxyUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-secretUpgrade libvirt-clientUpgrade libvirt-docsUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-plugin-sanlockUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-interface | Nov 21, 2024 | Aug 29, 2024 |
| Redhat_linux | — | Upgrade libvirt-daemon-plugin-sanlock-debuginfoUpgrade libvirtUpgrade libvirt-wireshark-debuginfoUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-client-qemuUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-debuginfoUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade libvirt-daemon-common-debuginfoUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-docsUpgrade libvirt-ssh-proxy-debuginfoUpgrade libvirt-libsUpgrade libvirt-daemon-commonUpgrade libvirt-daemon-proxy-debuginfoUpgrade libvirt-daemon-logUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade libvirt-daemon-plugin-lockd-debuginfoUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-nss-debuginfoUpgrade libvirt-develUpgrade libvirt-ssh-proxyUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-network-debuginfoUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-log-debuginfoUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-lock-debuginfoUpgrade libvirt-nssUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade libvirt-clientUpgrade libvirt-daemon-plugin-sanlockUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-debuginfoUpgrade libvirt-client-debuginfoUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade libvirt-debugsourceUpgrade libvirt-libs-debuginfoUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-proxyUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade libvirt-daemon-plugin-lockdUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libvirt-daemon-lock | Nov 13, 2024 | Aug 30, 2024 |
| Rocky_linux | — | Upgrade libvirt-daemon-plugin-lockd-debuginfoUpgrade libvirt-daemon-plugin-sanlock-debuginfoUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade libvirt-daemon-logUpgrade libvirt-develUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade libvirt-nssUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-commonUpgrade libvirt-daemon-common-debuginfoUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-debuginfoUpgrade libvirt-clientUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemonUpgrade libvirt-client-qemuUpgrade libvirt-daemon-lock-debuginfoUpgrade libvirt-daemon-proxy-debuginfoUpgrade libvirt-libs-debuginfoUpgrade libvirt-daemon-log-debuginfoUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade libvirt-daemon-driver-secretUpgrade libvirt-ssh-proxyUpgrade libvirt-daemon-plugin-sanlockUpgrade libvirt-docsUpgrade libvirt-libsUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade libvirt-debugsourceUpgrade libvirt-debuginfoUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-lockUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-client-debuginfoUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade libvirt-daemon-driver-networkUpgrade libvirt-ssh-proxy-debuginfoUpgrade libvirt-daemon-plugin-lockdUpgrade libvirtUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-proxyUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-nss-debuginfoUpgrade libvirt-daemon-driver-network-debuginfoUpgrade libvirt-daemon-driver-storage-logical-debuginfo | Mar 18, 2025 | Aug 30, 2024 |
| Suse | — | Upgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-plugin-lockdUpgrade libvirt-daemon-qemuUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade libvirt-docUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirtUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-libsUpgrade libvirt-daemon-logUpgrade libvirt-daemon-lockUpgrade libvirt-daemon-proxyUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-plugin-sanlockUpgrade libvirt-daemon-hooksUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-nssUpgrade libvirt-ssh-proxyUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-commonUpgrade libvirt-develUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-libxlUpgrade libvirt-clientUpgrade libvirt-daemon-driver-storageUpgrade libvirt-client-qemuUpgrade libvirt-daemon-xenUpgrade libvirt-daemon-driver-storage-mpath | Dec 5, 2025 | Nov 21, 2024 |
| Ubuntu | — | Upgrade libvirt | Nov 19, 2024 | Aug 30, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub