CVE-2024-8235
libnss-libvirt: A flaw was found in libvirt
CVE-2024-8235 is fixed in 49 products on 1 platform, first by DEBIAN-CVE-2024-8235, released August 30, 2024. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
6.2
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0024
15th percentile
A flaw was found in libvirt. A refactor of the code fetching the list ofinterfaces for multiple APIs introduced a corner case on platforms whereallocating 0 bytes of memory results in a NULL pointer. This corner casewould lead to a NULL-pointer dereference and subsequent crash ofvirtinterfaced. This issue could allow clients connecting to the read-onlysocket to crash the virtinterfaced daemon.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| libnss-libvirt · Ubuntu 24.10 (oracular) | 10.6.0-1ubuntu3 | libnss-libvirt 10.6.0-1ubuntu3 | Jan 16, 2026 |
| libvirt · Debian 13.5 (trixie) | 10.7.0-1 | DEBIAN-CVE-2024-8235 | Aug 30, 2024 |
| libvirt · Debian 14 | 10.7.0-1 | DEBIAN-CVE-2024-8235 | Aug 30, 2024 |
| libvirt · RHEL 9 | 0:10.5.0-7.el9_5 | RHSA-2024:9128 | Nov 12, 2024 |
| libvirt · almalinux 9 | 10.5.0-7.el9_5.alma.1 | ALSA-2024:9128 | Nov 12, 2024 |
| libvirt · ol 9 | 0:10.5.0-7.0.1.el9_5 | ELSA-2024-9128 | Nov 14, 2024 |
| libvirt · rocky 9 | 0:10.5.0-7.4.el9_5 | RLSA-2024:9128 | Mar 17, 2025 |
| libvirt-client · RHEL 9 | 0:10.5.0-7.el9_5 | RHSA-2024:9128 | Nov 12, 2024 |
| libvirt-client · almalinux 9 | 10.5.0-7.el9_5.alma.1 | ALSA-2024:9128 | Nov 12, 2024 |
| libvirt-client · ol 9 | 0:10.5.0-7.0.1.el9_5 | ELSA-2024-9128 | Nov 14, 2024 |
| libvirt-client-qemu · RHEL 9 | 0:10.5.0-7.el9_5 | RHSA-2024:9128 | Nov 12, 2024 |
| libvirt-client-qemu · almalinux 9 | 10.5.0-7.el9_5.alma.1 | ALSA-2024:9128 | Nov 12, 2024 |
| libvirt-client-qemu · ol 9 | 0:10.5.0-7.0.1.el9_5 | ELSA-2024-9128 | Nov 14, 2024 |
| libvirt-clients · Ubuntu 24.10 (oracular) | 10.6.0-1ubuntu3 | libvirt-clients 10.6.0-1ubuntu3 | Jan 16, 2026 |
| libvirt-clients-qemu · Ubuntu 24.10 (oracular) | 10.6.0-1ubuntu3 | libvirt-clients-qemu 10.6.0-1ubuntu3 | Jan 16, 2026 |
| libvirt-daemon · RHEL 9 | 0:10.5.0-7.el9_5 | RHSA-2024:9128 | Nov 12, 2024 |
| libvirt-daemon · Ubuntu 24.10 (oracular) | 10.6.0-1ubuntu3 | libvirt-daemon 10.6.0-1ubuntu3 | Jan 16, 2026 |
| libvirt-daemon · almalinux 9 | 10.5.0-7.el9_5.alma.1 | ALSA-2024:9128 | Nov 12, 2024 |
| libvirt-daemon · ol 9 | 0:10.5.0-7.0.1.el9_5 | ELSA-2024-9128 | Nov 14, 2024 |
| libvirt-daemon-common · RHEL 9 | 0:10.5.0-7.el9_5 | RHSA-2024:9128 | Nov 12, 2024 |
| libvirt-daemon-common · almalinux 9 | 10.5.0-7.el9_5.alma.1 | ALSA-2024:9128 | Nov 12, 2024 |
| libvirt-daemon-common · ol 9 | 0:10.5.0-7.0.1.el9_5 | ELSA-2024-9128 | Nov 14, 2024 |
| libvirt-daemon-config-network · RHEL 9 | 0:10.5.0-7.el9_5 | RHSA-2024:9128 | Nov 12, 2024 |
| libvirt-daemon-config-network · Ubuntu 24.10 (oracular) | 10.6.0-1ubuntu3 | libvirt-daemon-config-network 10.6.0-1ubuntu3 | Jan 16, 2026 |
| libvirt-daemon-config-network · almalinux 9 | 10.5.0-7.el9_5.alma.1 | ALSA-2024:9128 | Nov 12, 2024 |
| libvirt-daemon-config-network · ol 9 | 0:10.5.0-7.0.1.el9_5 | ELSA-2024-9128 | Nov 14, 2024 |
| libvirt-daemon-config-nwfilter · RHEL 9 | 0:10.5.0-7.el9_5 | RHSA-2024:9128 | Nov 12, 2024 |
| libvirt-daemon-config-nwfilter · Ubuntu 24.10 (oracular) | 10.6.0-1ubuntu3 | libvirt-daemon-config-nwfilter 10.6.0-1ubuntu3 | Jan 16, 2026 |
| libvirt-daemon-config-nwfilter · almalinux 9 | 10.5.0-7.el9_5.alma.1 | ALSA-2024:9128 | Nov 12, 2024 |
| libvirt-daemon-config-nwfilter · ol 9 | 0:10.5.0-7.0.1.el9_5 | ELSA-2024-9128 | Nov 14, 2024 |
| libvirt-daemon-driver-interface · RHEL 9 | 0:10.5.0-7.el9_5 | RHSA-2024:9128 | Nov 12, 2024 |
| libvirt-daemon-driver-interface · almalinux 9 | 10.5.0-7.el9_5.alma.1 | ALSA-2024:9128 | Nov 12, 2024 |
| libvirt-daemon-driver-interface · ol 9 | 0:10.5.0-7.0.1.el9_5 | ELSA-2024-9128 | Nov 14, 2024 |
| libvirt-daemon-driver-lxc · Ubuntu 24.10 (oracular) | 10.6.0-1ubuntu3 | libvirt-daemon-driver-lxc 10.6.0-1ubuntu3 | Jan 16, 2026 |
| libvirt-daemon-driver-network · RHEL 9 | 0:10.5.0-7.el9_5 | RHSA-2024:9128 | Nov 12, 2024 |
| libvirt-daemon-driver-network · almalinux 9 | 10.5.0-7.el9_5.alma.1 | ALSA-2024:9128 | Nov 12, 2024 |
| libvirt-daemon-driver-network · ol 9 | 0:10.5.0-7.0.1.el9_5 | ELSA-2024-9128 | Nov 14, 2024 |
| libvirt-daemon-driver-nodedev · RHEL 9 | 0:10.5.0-7.el9_5 | RHSA-2024:9128 | Nov 12, 2024 |
| libvirt-daemon-driver-nodedev · almalinux 9 | 10.5.0-7.el9_5.alma.1 | ALSA-2024:9128 | Nov 12, 2024 |
| libvirt-daemon-driver-nodedev · ol 9 | 0:10.5.0-7.0.1.el9_5 | ELSA-2024-9128 | Nov 14, 2024 |
| libvirt-daemon-driver-nwfilter · RHEL 9 | 0:10.5.0-7.el9_5 | RHSA-2024:9128 | Nov 12, 2024 |
| libvirt-daemon-driver-nwfilter · almalinux 9 | 10.5.0-7.el9_5.alma.1 | ALSA-2024:9128 | Nov 12, 2024 |
| libvirt-daemon-driver-nwfilter · ol 9 | 0:10.5.0-7.0.1.el9_5 | ELSA-2024-9128 | Nov 14, 2024 |
| libvirt-daemon-driver-qemu · RHEL 9 | 0:10.5.0-7.el9_5 | RHSA-2024:9128 | Nov 12, 2024 |
| libvirt-daemon-driver-qemu · Ubuntu 24.10 (oracular) | 10.6.0-1ubuntu3 | libvirt-daemon-driver-qemu 10.6.0-1ubuntu3 | Jan 16, 2026 |
| libvirt-daemon-driver-qemu · almalinux 9 | 10.5.0-7.el9_5.alma.1 | ALSA-2024:9128 | Nov 12, 2024 |
| libvirt-daemon-driver-qemu · ol 9 | 0:10.5.0-7.0.1.el9_5 | ELSA-2024-9128 | Nov 14, 2024 |
| libvirt-daemon-driver-secret · RHEL 9 | 0:10.5.0-7.el9_5 | RHSA-2024:9128 | Nov 12, 2024 |
| libvirt-daemon-driver-secret · almalinux 9 | 10.5.0-7.el9_5.alma.1 | ALSA-2024:9128 | Nov 12, 2024 |
| libvirt-daemon-driver-secret · ol 9 | 0:10.5.0-7.0.1.el9_5 | ELSA-2024-9128 | Nov 14, 2024 |
| libvirt-daemon-driver-storage · RHEL 9 | 0:10.5.0-7.el9_5 | RHSA-2024:9128 | Nov 12, 2024 |
| libvirt-daemon-driver-storage · almalinux 9 | 10.5.0-7.el9_5.alma.1 | ALSA-2024:9128 | Nov 12, 2024 |
| libvirt-daemon-driver-storage · ol 9 | 0:10.5.0-7.0.1.el9_5 | ELSA-2024-9128 | Nov 14, 2024 |
| libvirt-daemon-driver-storage-core · RHEL 9 | 0:10.5.0-7.el9_5 | RHSA-2024:9128 | Nov 12, 2024 |
| libvirt-daemon-driver-storage-core · almalinux 9 | 10.5.0-7.el9_5.alma.1 | ALSA-2024:9128 | Nov 12, 2024 |
| libvirt-daemon-driver-storage-core · ol 9 | 0:10.5.0-7.0.1.el9_5 | ELSA-2024-9128 | Nov 14, 2024 |
| libvirt-daemon-driver-storage-disk · RHEL 9 | 0:10.5.0-7.el9_5 | RHSA-2024:9128 | Nov 12, 2024 |
| libvirt-daemon-driver-storage-disk · almalinux 9 | 10.5.0-7.el9_5.alma.1 | ALSA-2024:9128 | Nov 12, 2024 |
| libvirt-daemon-driver-storage-disk · ol 9 | 0:10.5.0-7.0.1.el9_5 | ELSA-2024-9128 | Nov 14, 2024 |
| libvirt-daemon-driver-storage-gluster · Ubuntu 24.10 (oracular) | 10.6.0-1ubuntu3 | libvirt-daemon-driver-storage-gluster 10.6.0-1ubuntu3 | Jan 16, 2026 |
| libvirt-daemon-driver-storage-iscsi · RHEL 9 | 0:10.5.0-7.el9_5 | RHSA-2024:9128 | Nov 12, 2024 |
| libvirt-daemon-driver-storage-iscsi · almalinux 9 | 10.5.0-7.el9_5.alma.1 | ALSA-2024:9128 | Nov 12, 2024 |
| libvirt-daemon-driver-storage-iscsi · ol 9 | 0:10.5.0-7.0.1.el9_5 | ELSA-2024-9128 | Nov 14, 2024 |
| libvirt-daemon-driver-storage-iscsi-direct · Ubuntu 24.10 (oracular) | 10.6.0-1ubuntu3 | libvirt-daemon-driver-storage-iscsi-direct 10.6.0-1ubuntu3 | Jan 16, 2026 |
| libvirt-daemon-driver-storage-logical · RHEL 9 | 0:10.5.0-7.el9_5 | RHSA-2024:9128 | Nov 12, 2024 |
| libvirt-daemon-driver-storage-logical · almalinux 9 | 10.5.0-7.el9_5.alma.1 | ALSA-2024:9128 | Nov 12, 2024 |
| libvirt-daemon-driver-storage-logical · ol 9 | 0:10.5.0-7.0.1.el9_5 | ELSA-2024-9128 | Nov 14, 2024 |
| libvirt-daemon-driver-storage-mpath · RHEL 9 | 0:10.5.0-7.el9_5 | RHSA-2024:9128 | Nov 12, 2024 |
| libvirt-daemon-driver-storage-mpath · almalinux 9 | 10.5.0-7.el9_5.alma.1 | ALSA-2024:9128 | Nov 12, 2024 |
| libvirt-daemon-driver-storage-mpath · ol 9 | 0:10.5.0-7.0.1.el9_5 | ELSA-2024-9128 | Nov 14, 2024 |
| libvirt-daemon-driver-storage-rbd · RHEL 9 | 0:10.5.0-7.el9_5 | RHSA-2024:9128 | Nov 12, 2024 |
| libvirt-daemon-driver-storage-rbd · Ubuntu 24.10 (oracular) | 10.6.0-1ubuntu3 | libvirt-daemon-driver-storage-rbd 10.6.0-1ubuntu3 | Jan 16, 2026 |
| libvirt-daemon-driver-storage-rbd · almalinux 9 | 10.5.0-7.el9_5.alma.1 | ALSA-2024:9128 | Nov 12, 2024 |
| libvirt-daemon-driver-storage-rbd · ol 9 | 0:10.5.0-7.0.1.el9_5 | ELSA-2024-9128 | Nov 14, 2024 |
| libvirt-daemon-driver-storage-scsi · RHEL 9 | 0:10.5.0-7.el9_5 | RHSA-2024:9128 | Nov 12, 2024 |
| libvirt-daemon-driver-storage-scsi · almalinux 9 | 10.5.0-7.el9_5.alma.1 | ALSA-2024:9128 | Nov 12, 2024 |
| libvirt-daemon-driver-storage-scsi · ol 9 | 0:10.5.0-7.0.1.el9_5 | ELSA-2024-9128 | Nov 14, 2024 |
| libvirt-daemon-driver-storage-zfs · Ubuntu 24.10 (oracular) | 10.6.0-1ubuntu3 | libvirt-daemon-driver-storage-zfs 10.6.0-1ubuntu3 | Jan 16, 2026 |
| libvirt-daemon-driver-vbox · Ubuntu 24.10 (oracular) | 10.6.0-1ubuntu3 | libvirt-daemon-driver-vbox 10.6.0-1ubuntu3 | Jan 16, 2026 |
| libvirt-daemon-driver-xen · Ubuntu 24.10 (oracular) | 10.6.0-1ubuntu3 | libvirt-daemon-driver-xen 10.6.0-1ubuntu3 | Jan 16, 2026 |
| libvirt-daemon-kvm · RHEL 9 | 0:10.5.0-7.el9_5 | RHSA-2024:9128 | Nov 12, 2024 |
| libvirt-daemon-kvm · almalinux 9 | 10.5.0-7.el9_5.alma.1 | ALSA-2024:9128 | Nov 12, 2024 |
| libvirt-daemon-kvm · ol 9 | 0:10.5.0-7.0.1.el9_5 | ELSA-2024-9128 | Nov 14, 2024 |
| libvirt-daemon-lock · RHEL 9 | 0:10.5.0-7.el9_5 | RHSA-2024:9128 | Nov 12, 2024 |
| libvirt-daemon-lock · almalinux 9 | 10.5.0-7.el9_5.alma.1 | ALSA-2024:9128 | Nov 12, 2024 |
| libvirt-daemon-lock · ol 9 | 0:10.5.0-7.0.1.el9_5 | ELSA-2024-9128 | Nov 14, 2024 |
| libvirt-daemon-log · RHEL 9 | 0:10.5.0-7.el9_5 | RHSA-2024:9128 | Nov 12, 2024 |
| libvirt-daemon-log · almalinux 9 | 10.5.0-7.el9_5.alma.1 | ALSA-2024:9128 | Nov 12, 2024 |
| libvirt-daemon-log · ol 9 | 0:10.5.0-7.0.1.el9_5 | ELSA-2024-9128 | Nov 14, 2024 |
| libvirt-daemon-plugin-lockd · RHEL 9 | 0:10.5.0-7.el9_5 | RHSA-2024:9128 | Nov 12, 2024 |
| libvirt-daemon-plugin-lockd · almalinux 9 | 10.5.0-7.el9_5.alma.1 | ALSA-2024:9128 | Nov 12, 2024 |
| libvirt-daemon-plugin-lockd · ol 9 | 0:10.5.0-7.0.1.el9_5 | ELSA-2024-9128 | Nov 14, 2024 |
| libvirt-daemon-plugin-sanlock · RHEL 9 | 0:10.5.0-7.el9_5 | RHSA-2024:9128 | Nov 12, 2024 |
| libvirt-daemon-plugin-sanlock · almalinux 9 | 10.5.0-7.el9_5.alma.1 | ALSA-2024:9128 | Nov 12, 2024 |
| libvirt-daemon-plugin-sanlock · ol 9 | 0:10.5.0-7.0.1.el9_5 | ELSA-2024-9128 | Nov 14, 2024 |
| libvirt-daemon-proxy · RHEL 9 | 0:10.5.0-7.el9_5 | RHSA-2024:9128 | Nov 12, 2024 |
| libvirt-daemon-proxy · almalinux 9 | 10.5.0-7.el9_5.alma.1 | ALSA-2024:9128 | Nov 12, 2024 |
| libvirt-daemon-proxy · ol 9 | 0:10.5.0-7.0.1.el9_5 | ELSA-2024-9128 | Nov 14, 2024 |
| libvirt-daemon-system · Ubuntu 24.10 (oracular) | 10.6.0-1ubuntu3 | libvirt-daemon-system 10.6.0-1ubuntu3 | Jan 16, 2026 |
| libvirt-daemon-system-systemd · Ubuntu 24.10 (oracular) | 10.6.0-1ubuntu3 | libvirt-daemon-system-systemd 10.6.0-1ubuntu3 | Jan 16, 2026 |
| libvirt-daemon-system-sysv · Ubuntu 24.10 (oracular) | 10.6.0-1ubuntu3 | libvirt-daemon-system-sysv 10.6.0-1ubuntu3 | Jan 16, 2026 |
| libvirt-devel · RHEL 9 | 0:10.5.0-7.el9_5 | RHSA-2024:9128 | Nov 12, 2024 |
| libvirt-devel · almalinux 9 | 10.5.0-7.el9_5.alma.1 | ALSA-2024:9128 | Nov 12, 2024 |
| libvirt-devel · ol 9 | 0:10.5.0-7.0.1.el9_5 | ELSA-2024-9128 | Nov 14, 2024 |
| libvirt-docs · RHEL 9 | 0:10.5.0-7.el9_5 | RHSA-2024:9128 | Nov 12, 2024 |
| libvirt-docs · almalinux 9 | 10.5.0-7.el9_5.alma.1 | ALSA-2024:9128 | Nov 12, 2024 |
| libvirt-docs · ol 9 | 0:10.5.0-7.0.1.el9_5 | ELSA-2024-9128 | Nov 14, 2024 |
| libvirt-l10n · Ubuntu 24.10 (oracular) | 10.6.0-1ubuntu3 | libvirt-l10n 10.6.0-1ubuntu3 | Jan 16, 2026 |
| libvirt-libs · RHEL 9 | 0:10.5.0-7.el9_5 | RHSA-2024:9128 | Nov 12, 2024 |
| libvirt-libs · almalinux 9 | 10.5.0-7.el9_5.alma.1 | ALSA-2024:9128 | Nov 12, 2024 |
| libvirt-libs · ol 9 | 0:10.5.0-7.0.1.el9_5 | ELSA-2024-9128 | Nov 14, 2024 |
| libvirt-login-shell · Ubuntu 24.10 (oracular) | 10.6.0-1ubuntu3 | libvirt-login-shell 10.6.0-1ubuntu3 | Jan 16, 2026 |
| libvirt-nss · RHEL 9 | 0:10.5.0-7.el9_5 | RHSA-2024:9128 | Nov 12, 2024 |
| libvirt-nss · almalinux 9 | 10.5.0-7.el9_5.alma.1 | ALSA-2024:9128 | Nov 12, 2024 |
| libvirt-nss · ol 9 | 0:10.5.0-7.0.1.el9_5 | ELSA-2024-9128 | Nov 14, 2024 |
| libvirt-sanlock · Ubuntu 24.10 (oracular) | 10.6.0-1ubuntu3 | libvirt-sanlock 10.6.0-1ubuntu3 | Jan 16, 2026 |
| libvirt-ssh-proxy · RHEL 9 | 0:10.5.0-7.el9_5 | RHSA-2024:9128 | Nov 12, 2024 |
| libvirt-ssh-proxy · almalinux 9 | 10.5.0-7.el9_5.alma.1 | ALSA-2024:9128 | Nov 12, 2024 |
| libvirt-ssh-proxy · ol 9 | 0:10.5.0-7.0.1.el9_5 | ELSA-2024-9128 | Nov 14, 2024 |
| libvirt-wireshark · Ubuntu 24.10 (oracular) | 10.6.0-1ubuntu3 | libvirt-wireshark 10.6.0-1ubuntu3 | Jan 16, 2026 |
| libvirt0 · Ubuntu 24.10 (oracular) | 10.6.0-1ubuntu3 | libvirt0 10.6.0-1ubuntu3 | Jan 16, 2026 |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.