A flaw was found in libvirt. A refactor of the code fetching the list of interfaces for multiple APIs introduced a corner case on platforms where allocating 0 bytes of memory results in a NULL pointer. This corner case would lead to a NULL-pointer dereference and subsequent crash of virtinterfaced. This issue could allow clients connecting to the read-only socket to crash the virtinterfaced daemon.
A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Enterprise_linux | Redhat | 9.0 (including) | 9.0 (including) |
| Red Hat Enterprise Linux 9 | RedHat | libvirt-0:10.5.0-7.el9_5 | * |
| Libvirt | Ubuntu | devel | * |
| Libvirt | Ubuntu | oracular | * |
| Libvirt | Ubuntu | upstream | * |