---
id: CVE-2024-8235
title: 'Libvirt: crash of virtinterfaced via virconnectlistinterfaces()'
summary: >-
  A flaw was found in libvirt. A refactor of the code fetching the list of
  interfaces for multiple APIs introduced a corner case on platforms where
  allocating 0 bytes of memory results in a NULL pointer. This corner case would
  lead to a NU…
severity: medium
cvss: 6.2
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
cvssSource: cna
cwe:
  - CWE-476
vendor: Red Hat
product: libvirt
affected:
  - libvirt >= 10.4.0 < 10.7.0
  - libvirt (all versions)
  - libvirt (all versions)
  - libvirt
  - libvirt
  - 'virt:rhel/libvirt'
  - 'virt:av/libvirt'
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2024-08-30T17:10:46.243548Z'
published: '2024-08-30'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T14:44:22.583Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2024-8235'
references:
  - url: 'https://access.redhat.com/errata/RHSA-2024:9128'
    label: 'RHSA-2024:9128'
  - url: 'https://access.redhat.com/security/cve/CVE-2024-8235'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2308680'
    label: RHBZ#2308680
  - url: >-
      https://lists.libvirt.org/archives/list/devel@lists.libvirt.org/thread/X6WOVCL6QF3FQRFIIXL736RFZVSUWLWJ/
tags:
  - cve.org
epss: 0.00242
epssPercentile: 0.15494
ingestedAt: '2026-11-05T21:36:00.883Z'
---

## Overview

A flaw was found in libvirt. A refactor of the code fetching the list of interfaces for multiple APIs introduced a corner case on platforms where allocating 0 bytes of memory results in a NULL pointer. This corner case would lead to a NULL-pointer dereference and subsequent crash of virtinterfaced. This issue could allow clients connecting to the read-only socket to crash the virtinterfaced daemon.

## Affected

- `libvirt >= 10.4.0 < 10.7.0`
- `libvirt (all versions)`
- `libvirt (all versions)`
- `libvirt`
- `libvirt`
- `virt:rhel/libvirt`
- `virt:av/libvirt`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.