https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T00:46:16.309686+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2024:2560 ALSA-2024:2560 — Moderate: libvirt security and bug fix update 2026-10-07T00:46:16.462659+00:00

Affected: AlmaLinux:9: libvirt, AlmaLinux:9: libvirt-client, AlmaLinux:9: libvirt-client-qemu, AlmaLinux:9: libvirt-daemon, AlmaLinux:9: libvirt-daemon-common, AlmaLinux:9: libvirt-daemon-config-network, AlmaLinux:9: libvirt-daemon-config-nwfilter, AlmaLinux:9: libvirt-daemon-driver-interface, AlmaLinux:9: libvirt-daemon-driver-network, AlmaLinux:9: libvirt-daemon-driver-nodedev and 21 more

The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In addition, libvirt provides tools for remote management of virtualized systems.

Security Fixes:

* libvirt: off-by-one error in udevListInterfacesByStatus() (CVE-2024-1441) * libvirt: negative g_new0 length can lead to unbounded memory allocation (CVE-2024-2494)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fixes:

* libvirt: off-by-one error in udevListInterfacesByStatus() [almalinux-9] (JIRA:AlmaLinux-25081) * libvirt: negative g_new0 length can lead to unbounded memory allocation [almalinux-9] (JIRA:AlmaLinux-29515)

 https://cve.radiocsirt.org/vuln/bdu:2024-02834 bdu:2024-02834 2026-10-07T00:46:16.462760+00:00 bdu:2024-02834 https://cve.radiocsirt.org/vuln/bell-cve-2024-1441 BELL-CVE-2024-1441 2026-10-07T00:46:16.462777+00:00

Affected: Alpaquita:23: libvirt, Alpaquita:stream: libvirt

 https://cve.radiocsirt.org/vuln/euvd-2026-260423 EUVD-2026-260423 2026-10-07T00:46:16.462804+00:00 EUVD-2026-260423 https://cve.radiocsirt.org/vuln/fkie_cve-2024-1441 fkie_cve-2024-1441 2026-10-07T00:46:16.462816+00:00

An off-by-one error flaw was found in the udevListInterfacesByStatus() function in libvirt when the number of interfaces exceeds the size of the `names` array. This issue can be reproduced by sending specially crafted data to the libvirt daemon, allowing an unprivileged client to perform a denial of service attack by causing the libvirt daemon to crash.

 https://cve.radiocsirt.org/vuln/ghsa-2cj9-wjmr-5w57 GHSA-2cj9-wjmr-5w57 2026-10-07T00:46:16.462839+00:00

An off-by-one error flaw was found in the udevListInterfacesByStatus() function in libvirt when the number of interfaces exceeds the size of the `names` array. This issue can be reproduced by sending specially crafted data to the libvirt daemon, allowing an unprivileged client to perform a denial of service attack by causing the libvirt daemon to crash.

 https://cve.radiocsirt.org/vuln/gsd-2024-1441 gsd-2024-1441 2026-10-07T00:46:16.462853+00:00 gsd-2024-1441 https://cve.radiocsirt.org/vuln/msrc_cve-2024-1441 msrc_CVE-2024-1441 — Libvirt: off-by-one error in udevlistinterfacesbystatus() 2026-10-07T00:46:16.462863+00:00 msrc_CVE-2024-1441 https://cve.radiocsirt.org/vuln/oesa-2024-1391 OESA-2024-1391 — libvirt security update 2026-10-07T00:46:16.462878+00:00

Affected: openEuler:20.03-LTS-SP1: libvirt, openEuler:22.03-LTS: libvirt, openEuler:22.03-LTS-SP1: libvirt, openEuler:22.03-LTS-SP2: libvirt, openEuler:22.03-LTS-SP3: libvirt

Libvirt is a C toolkit to interact with the virtualization capabilities of recent versions of Linux (and other OSes). The main package includes the libvirtd server exporting the virtualization support. Security Fix(es): An off-by-one error flaw was found in the udevListInterfacesByStatus() function in libvirt when the number of interfaces exceeds the size of the `names` array. This issue can be reproduced by sending specially crafted data to the libvirt daemon, allowing an unprivileged client to perform a denial of service attack by causing the libvirt daemon to crash.(CVE-2024-1441) A flaw was found in the RPC library APIs of libvirt. The RPC server deserialization code allocates memory for arrays before the non-negative length check is performed by the C API entry points. Passing a negative length to the g_new0 function results in a crash due to the negative length being treated as a huge positive number. This flaw allows a local, unprivileged user to perform a denial of service attack by causing the libvirt daemon to crash.(CVE-2024-2494)

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13759-1 openSUSE-SU-2024:13759-1 — libvirt-10.1.0-1.1 on GA media 2026-10-07T00:46:16.462909+00:00

libvirt-10.1.0-1.1 on GA media

 https://cve.radiocsirt.org/vuln/suse-su-2024:1005-1 SUSE-SU-2024:1005-1 — Security update for libvirt 2026-10-07T00:46:16.462925+00:00

Security update for libvirt

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-1441 UBUNTU-CVE-2024-1441 2026-10-07T00:46:16.462938+00:00

Affected: Ubuntu:Pro:14.04:LTS: libvirt, Ubuntu:Pro:16.04:LTS: libvirt, Ubuntu:Pro:18.04:LTS: libvirt, Ubuntu:20.04:LTS: libvirt, Ubuntu:22.04:LTS: libvirt, Ubuntu:24.04:LTS: libvirt

An off-by-one error flaw was found in the udevListInterfacesByStatus() function in libvirt when the number of interfaces exceeds the size of the `names` array. This issue can be reproduced by sending specially crafted data to the libvirt daemon, allowing an unprivileged client to perform a denial of service attack by causing the libvirt daemon to crash.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-0593 WID-SEC-W-2024-0593 — libvirt: Schwachstelle ermöglicht Denial of Service 2026-10-07T00:46:16.462962+00:00

Ein lokaler Angreifer kann eine Schwachstelle in libvirt ausnutzen, um einen Denial of Service Angriff durchzuführen.