Medium severity6.2OSV Advisory· Published Aug 30, 2024· Updated Jun 17, 2026
CVE-2024-8235
CVE-2024-8235
Description
A flaw was found in libvirt. A refactor of the code fetching the list of interfaces for multiple APIs introduced a corner case on platforms where allocating 0 bytes of memory results in a NULL pointer. This corner case would lead to a NULL-pointer dereference and subsequent crash of virtinterfaced. This issue could allow clients connecting to the read-only socket to crash the virtinterfaced daemon.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
36- osv-coords33 versionspkg:rpm/opensuse/libvirt&distro=openSUSE%20Tumbleweedpkg:rpm/almalinux/libvirtpkg:rpm/almalinux/libvirt-clientpkg:rpm/almalinux/libvirt-client-qemupkg:rpm/almalinux/libvirt-daemonpkg:rpm/almalinux/libvirt-daemon-commonpkg:rpm/almalinux/libvirt-daemon-config-networkpkg:rpm/almalinux/libvirt-daemon-config-nwfilterpkg:rpm/almalinux/libvirt-daemon-driver-interfacepkg:rpm/almalinux/libvirt-daemon-driver-networkpkg:rpm/almalinux/libvirt-daemon-driver-nodedevpkg:rpm/almalinux/libvirt-daemon-driver-nwfilterpkg:rpm/almalinux/libvirt-daemon-driver-qemupkg:rpm/almalinux/libvirt-daemon-driver-secretpkg:rpm/almalinux/libvirt-daemon-driver-storagepkg:rpm/almalinux/libvirt-daemon-driver-storage-corepkg:rpm/almalinux/libvirt-daemon-driver-storage-diskpkg:rpm/almalinux/libvirt-daemon-driver-storage-iscsipkg:rpm/almalinux/libvirt-daemon-driver-storage-logicalpkg:rpm/almalinux/libvirt-daemon-driver-storage-mpathpkg:rpm/almalinux/libvirt-daemon-driver-storage-rbdpkg:rpm/almalinux/libvirt-daemon-driver-storage-scsipkg:rpm/almalinux/libvirt-daemon-kvmpkg:rpm/almalinux/libvirt-daemon-lockpkg:rpm/almalinux/libvirt-daemon-logpkg:rpm/almalinux/libvirt-daemon-plugin-lockdpkg:rpm/almalinux/libvirt-daemon-plugin-sanlockpkg:rpm/almalinux/libvirt-daemon-proxypkg:rpm/almalinux/libvirt-develpkg:rpm/almalinux/libvirt-docspkg:rpm/almalinux/libvirt-libspkg:rpm/almalinux/libvirt-nsspkg:rpm/almalinux/libvirt-ssh-proxy
< 10.7.0-1.1+ 32 more
- (no CPE)range: < 10.7.0-1.1
- (no CPE)range: < 10.5.0-7.el9_5.alma.1
- (no CPE)range: < 10.5.0-7.el9_5.alma.1
- (no CPE)range: < 10.5.0-7.el9_5.alma.1
- (no CPE)range: < 10.5.0-7.el9_5.alma.1
- (no CPE)range: < 10.5.0-7.el9_5.alma.1
- (no CPE)range: < 10.5.0-7.el9_5.alma.1
- (no CPE)range: < 10.5.0-7.el9_5.alma.1
- (no CPE)range: < 10.5.0-7.el9_5.alma.1
- (no CPE)range: < 10.5.0-7.el9_5.alma.1
- (no CPE)range: < 10.5.0-7.el9_5.alma.1
- (no CPE)range: < 10.5.0-7.el9_5.alma.1
- (no CPE)range: < 10.5.0-7.el9_5.alma.1
- (no CPE)range: < 10.5.0-7.el9_5.alma.1
- (no CPE)range: < 10.5.0-7.el9_5.alma.1
- (no CPE)range: < 10.5.0-7.el9_5.alma.1
- (no CPE)range: < 10.5.0-7.el9_5.alma.1
- (no CPE)range: < 10.5.0-7.el9_5.alma.1
- (no CPE)range: < 10.5.0-7.el9_5.alma.1
- (no CPE)range: < 10.5.0-7.el9_5.alma.1
- (no CPE)range: < 10.5.0-7.el9_5.alma.1
- (no CPE)range: < 10.5.0-7.el9_5.alma.1
- (no CPE)range: < 10.5.0-7.el9_5.alma.1
- (no CPE)range: < 10.5.0-7.el9_5.alma.1
- (no CPE)range: < 10.5.0-7.el9_5.alma.1
- (no CPE)range: < 10.5.0-7.el9_5.alma.1
- (no CPE)range: < 10.5.0-7.el9_5.alma.1
- (no CPE)range: < 10.5.0-7.el9_5.alma.1
- (no CPE)range: < 10.5.0-7.el9_5.alma.1
- (no CPE)range: < 10.5.0-7.el9_5.alma.1
- (no CPE)range: < 10.5.0-7.el9_5.alma.1
- (no CPE)range: < 10.5.0-7.el9_5.alma.1
- (no CPE)range: < 10.5.0-7.el9_5.alma.1
Patches
Vulnerability mechanics
References
5- lists.libvirt.org/archives/list/[email protected]/thread/X6WOVCL6QF3FQRFIIXL736RFZVSUWLWJ/nvdPatchThird Party Advisory
- access.redhat.com/security/cve/CVE-2024-8235nvdVendor Advisory
- bugzilla.redhat.com/show_bug.cginvdIssue TrackingVendor Advisory
- access.redhat.com/errata/RHSA-2024:9128nvd
- security.netapp.com/advisory/ntap-20240920-0006/nvd
News mentions
0No linked articles in our index yet.