Unrated severityOSV Advisory· Published Aug 30, 2024· Updated Nov 8, 2025
Libvirt: crash of virtinterfaced via virconnectlistinterfaces()
CVE-2024-8235
Description
A flaw was found in libvirt. A refactor of the code fetching the list of interfaces for multiple APIs introduced a corner case on platforms where allocating 0 bytes of memory results in a NULL pointer. This corner case would lead to a NULL-pointer dereference and subsequent crash of virtinterfaced. This issue could allow clients connecting to the read-only socket to crash the virtinterfaced daemon.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
35- osv-coords33 versionspkg:rpm/almalinux/libvirtpkg:rpm/almalinux/libvirt-clientpkg:rpm/almalinux/libvirt-client-qemupkg:rpm/almalinux/libvirt-daemonpkg:rpm/almalinux/libvirt-daemon-commonpkg:rpm/almalinux/libvirt-daemon-config-networkpkg:rpm/almalinux/libvirt-daemon-config-nwfilterpkg:rpm/almalinux/libvirt-daemon-driver-interfacepkg:rpm/almalinux/libvirt-daemon-driver-networkpkg:rpm/almalinux/libvirt-daemon-driver-nodedevpkg:rpm/almalinux/libvirt-daemon-driver-nwfilterpkg:rpm/almalinux/libvirt-daemon-driver-qemupkg:rpm/almalinux/libvirt-daemon-driver-secretpkg:rpm/almalinux/libvirt-daemon-driver-storagepkg:rpm/almalinux/libvirt-daemon-driver-storage-corepkg:rpm/almalinux/libvirt-daemon-driver-storage-diskpkg:rpm/almalinux/libvirt-daemon-driver-storage-iscsipkg:rpm/almalinux/libvirt-daemon-driver-storage-logicalpkg:rpm/almalinux/libvirt-daemon-driver-storage-mpathpkg:rpm/almalinux/libvirt-daemon-driver-storage-rbdpkg:rpm/almalinux/libvirt-daemon-driver-storage-scsipkg:rpm/almalinux/libvirt-daemon-kvmpkg:rpm/almalinux/libvirt-daemon-lockpkg:rpm/almalinux/libvirt-daemon-logpkg:rpm/almalinux/libvirt-daemon-plugin-lockdpkg:rpm/almalinux/libvirt-daemon-plugin-sanlockpkg:rpm/almalinux/libvirt-daemon-proxypkg:rpm/almalinux/libvirt-develpkg:rpm/almalinux/libvirt-docspkg:rpm/almalinux/libvirt-libspkg:rpm/almalinux/libvirt-nsspkg:rpm/almalinux/libvirt-ssh-proxypkg:rpm/opensuse/libvirt&distro=openSUSE%20Tumbleweed
< 10.5.0-7.el9_5.alma.1+ 32 more
- (no CPE)range: < 10.5.0-7.el9_5.alma.1
- (no CPE)range: < 10.5.0-7.el9_5.alma.1
- (no CPE)range: < 10.5.0-7.el9_5.alma.1
- (no CPE)range: < 10.5.0-7.el9_5.alma.1
- (no CPE)range: < 10.5.0-7.el9_5.alma.1
- (no CPE)range: < 10.5.0-7.el9_5.alma.1
- (no CPE)range: < 10.5.0-7.el9_5.alma.1
- (no CPE)range: < 10.5.0-7.el9_5.alma.1
- (no CPE)range: < 10.5.0-7.el9_5.alma.1
- (no CPE)range: < 10.5.0-7.el9_5.alma.1
- (no CPE)range: < 10.5.0-7.el9_5.alma.1
- (no CPE)range: < 10.5.0-7.el9_5.alma.1
- (no CPE)range: < 10.5.0-7.el9_5.alma.1
- (no CPE)range: < 10.5.0-7.el9_5.alma.1
- (no CPE)range: < 10.5.0-7.el9_5.alma.1
- (no CPE)range: < 10.5.0-7.el9_5.alma.1
- (no CPE)range: < 10.5.0-7.el9_5.alma.1
- (no CPE)range: < 10.5.0-7.el9_5.alma.1
- (no CPE)range: < 10.5.0-7.el9_5.alma.1
- (no CPE)range: < 10.5.0-7.el9_5.alma.1
- (no CPE)range: < 10.5.0-7.el9_5.alma.1
- (no CPE)range: < 10.5.0-7.el9_5.alma.1
- (no CPE)range: < 10.5.0-7.el9_5.alma.1
- (no CPE)range: < 10.5.0-7.el9_5.alma.1
- (no CPE)range: < 10.5.0-7.el9_5.alma.1
- (no CPE)range: < 10.5.0-7.el9_5.alma.1
- (no CPE)range: < 10.5.0-7.el9_5.alma.1
- (no CPE)range: < 10.5.0-7.el9_5.alma.1
- (no CPE)range: < 10.5.0-7.el9_5.alma.1
- (no CPE)range: < 10.5.0-7.el9_5.alma.1
- (no CPE)range: < 10.5.0-7.el9_5.alma.1
- (no CPE)range: < 10.5.0-7.el9_5.alma.1
- (no CPE)range: < 10.7.0-1.1
Patches
Vulnerability mechanics
References
4- access.redhat.com/errata/RHSA-2024:9128mitrevendor-advisoryx_refsource_REDHAT
- access.redhat.com/security/cve/CVE-2024-8235mitrevdb-entryx_refsource_REDHAT
- bugzilla.redhat.com/show_bug.cgimitreissue-trackingx_refsource_REDHAT
- lists.libvirt.org/archives/list/devel@lists.libvirt.org/thread/X6WOVCL6QF3FQRFIIXL736RFZVSUWLWJ/mitre
News mentions
0No linked articles in our index yet.