A flaw was found in libvirt. A refactor of the code fetching the list of interfaces for multiple APIs introduced a corner case on platforms where allocating 0 bytes of memory results in a NULL pointer. This corner case would lead to a NULL-pointer dereference and subsequent crash of virtinterfaced. This issue could allow clients connecting to the read-only socket to crash the virtinterfaced daemon.
CVSS Details
- CVSS 3.1 Base Score: 6.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-secretUpgrade libvirt-ssh-proxyUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-proxyUpgrade libvirt-daemon-lockUpgrade libvirt-clientUpgrade libvirt-docsUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-client-qemuUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-plugin-sanlockUpgrade libvirtUpgrade libvirt-libsUpgrade libvirt-nssUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-plugin-lockdUpgrade libvirt-daemon-commonUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemonUpgrade libvirt-develUpgrade libvirt-daemon-log | Nov 19, 2024 | Aug 30, 2024 |
| Alpine Linux | — | Upgrade libvirt | Oct 1, 2024 | Aug 30, 2024 |
| Debian | — | Upgrade libvirt | Jul 27, 2026 | Jul 27, 2026 |
| Oracle_linux | — | Upgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-plugin-sanlockUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-docsUpgrade libvirt-daemon-proxyUpgrade libvirtUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-ssh-proxyUpgrade libvirt-client-qemuUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-kvmUpgrade libvirt-clientUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-nssUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-logUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-libsUpgrade libvirt-develUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-commonUpgrade libvirt-daemon-lockUpgrade libvirt-daemon-plugin-lockd | Nov 21, 2024 | Aug 29, 2024 |
| Redhat_linux | — | Upgrade libvirt-daemon-lockUpgrade libvirt-debugsourceUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libvirt-clientUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-plugin-lockdUpgrade libvirt-libs-debuginfoUpgrade libvirt-daemon-proxyUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade libvirt-daemon-plugin-sanlockUpgrade libvirt-daemon-driver-storageUpgrade libvirt-nssUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-lock-debuginfoUpgrade libvirt-client-debuginfoUpgrade libvirt-daemon-debuginfoUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libvirt-daemon-kvmUpgrade libvirt-libsUpgrade libvirtUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-common-debuginfoUpgrade libvirt-docsUpgrade libvirt-daemon-driver-secretUpgrade libvirt-ssh-proxyUpgrade libvirt-daemon-plugin-lockd-debuginfoUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade libvirt-client-qemuUpgrade libvirt-daemon-logUpgrade libvirt-daemon-plugin-sanlock-debuginfoUpgrade libvirt-debuginfoUpgrade libvirt-daemon-proxy-debuginfoUpgrade libvirt-wireshark-debuginfoUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade libvirt-nss-debuginfoUpgrade libvirt-daemon-driver-network-debuginfoUpgrade libvirt-ssh-proxy-debuginfoUpgrade libvirt-develUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-log-debuginfoUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-commonUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade libvirt-daemon-driver-storage-rbd-debuginfo | Nov 13, 2024 | Aug 30, 2024 |
| Rocky_linux | — | Upgrade libvirt-daemon-kvmUpgrade libvirt-develUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-storage-iscsi-debuginfoUpgrade libvirt-daemon-common-debuginfoUpgrade libvirt-daemon-debuginfoUpgrade libvirt-daemon-plugin-sanlock-debuginfoUpgrade libvirt-daemon-logUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-commonUpgrade libvirt-nssUpgrade libvirt-daemon-plugin-sanlockUpgrade libvirt-libs-debuginfoUpgrade libvirt-daemon-driver-nwfilter-debuginfoUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-secretUpgrade libvirt-clientUpgrade libvirt-client-qemuUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-interface-debuginfoUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-storage-rbd-debuginfoUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-lock-debuginfoUpgrade libvirt-ssh-proxyUpgrade libvirt-daemon-proxy-debuginfoUpgrade libvirt-daemon-plugin-lockd-debuginfoUpgrade libvirt-docsUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-log-debuginfoUpgrade libvirt-libsUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-qemu-debuginfoUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-storage-disk-debuginfoUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-secret-debuginfoUpgrade libvirt-client-debuginfoUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-nodedev-debuginfoUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-storage-scsi-debuginfoUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-lockUpgrade libvirt-daemon-driver-storage-mpath-debuginfoUpgrade libvirt-nss-debuginfoUpgrade libvirt-daemon-plugin-lockdUpgrade libvirtUpgrade libvirt-ssh-proxy-debuginfoUpgrade libvirt-daemon-driver-storage-logical-debuginfoUpgrade libvirt-daemon-driver-network-debuginfoUpgrade libvirt-debuginfoUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-storage-core-debuginfoUpgrade libvirt-daemon-proxyUpgrade libvirt-debugsource | Mar 18, 2025 | Aug 30, 2024 |
| Suse | — | Upgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-plugin-lockdUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-qemuUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-proxyUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade libvirt-docUpgrade libvirt-daemon-logUpgrade libvirtUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-lockUpgrade libvirt-libsUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-develUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-libxlUpgrade libvirt-clientUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-nssUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-commonUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-ssh-proxyUpgrade libvirt-daemon-hooksUpgrade libvirt-client-qemuUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-xenUpgrade libvirt-daemon-plugin-sanlock | Dec 5, 2025 | Nov 21, 2024 |
| Ubuntu | — | Upgrade libvirt | Nov 19, 2024 | Aug 30, 2024 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub