A flaw was found in libvirt. A refactor of the code fetching the list of interfaces for multiple APIs introduced a corner case on platforms where allocating 0 bytes of memory results in a NULL pointer. This corner case would lead to a NULL-pointer dereference and subsequent crash of virtinterfaced. This issue could allow clients connecting to the read-only socket to crash the virtinterfaced daemon.
The product dereferences a pointer that it expects to be valid but is NULL.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Libvirt | Redhat | 10.4.0 (including) | 10.7.0 (excluding) |
| Red Hat Enterprise Linux 9 | RedHat | libvirt-0:10.5.0-7.el9_5 | * |
| Libvirt | Ubuntu | devel | * |
| Libvirt | Ubuntu | oracular | * |
| Libvirt | Ubuntu | upstream | * |