https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T09:23:14.701573+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2024:9128 ALSA-2024:9128 — Moderate: libvirt security update 2026-10-16T09:23:14.828677+00:00

Affected: AlmaLinux:9: libvirt, AlmaLinux:9: libvirt-client, AlmaLinux:9: libvirt-client-qemu, AlmaLinux:9: libvirt-daemon, AlmaLinux:9: libvirt-daemon-common, AlmaLinux:9: libvirt-daemon-config-network, AlmaLinux:9: libvirt-daemon-config-nwfilter, AlmaLinux:9: libvirt-daemon-driver-interface, AlmaLinux:9: libvirt-daemon-driver-network, AlmaLinux:9: libvirt-daemon-driver-nodedev and 22 more

Kernel-based Virtual Machine (KVM) offers a full virtualization solution forLinux on numerous hardware platforms. The virt:rhel module contains packageswhich provide user-space components used to run virtual machines using KVM.The packages also provide APIs for managing and interacting with the virtualized systems.

Security Fix(es):

* libvirt: Crash of virtinterfaced via virConnectListInterfaces() (CVE-2024-8235)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2024-07002 bdu:2024-07002 2026-10-16T09:23:14.828774+00:00 bdu:2024-07002 https://cve.radiocsirt.org/vuln/bell-cve-2024-8235 BELL-CVE-2024-8235 2026-10-16T09:23:14.828792+00:00

Affected: Alpaquita:stream: libvirt

 https://cve.radiocsirt.org/vuln/certfr-2025-avi-0855 certfr-2025-avi-0855 — De multiples vulnérabilités ont été découvertes dans les produits Juniper Networks. Certaines d'entre elles permettent… 2026-10-16T09:23:14.828810+00:00 certfr-2025-avi-0855 https://cve.radiocsirt.org/vuln/euvd-2026-260422 EUVD-2026-260422 2026-10-16T09:23:14.828825+00:00 EUVD-2026-260422 https://cve.radiocsirt.org/vuln/fkie_cve-2024-8235 fkie_cve-2024-8235 2026-10-16T09:23:14.828836+00:00

A flaw was found in libvirt. A refactor of the code fetching the list of interfaces for multiple APIs introduced a corner case on platforms where allocating 0 bytes of memory results in a NULL pointer. This corner case would lead to a NULL-pointer dereference and subsequent crash of virtinterfaced. This issue could allow clients connecting to the read-only socket to crash the virtinterfaced daemon.

 https://cve.radiocsirt.org/vuln/ghsa-94ch-6cfh-xxgc GHSA-94ch-6cfh-xxgc 2026-10-16T09:23:14.828858+00:00

A flaw was found in libvirt. A refactor of the code fetching the list of interfaces for multiple APIs introduced a corner case on platforms where allocating 0 bytes of memory results in a NULL pointer. This corner case would lead to a NULL-pointer dereference and subsequent crash of virtinterfaced. This issue could allow clients connecting to the read-only socket to crash the virtinterfaced daemon.

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:14315-1 openSUSE-SU-2024:14315-1 — libvirt-10.7.0-1.1 on GA media 2026-10-16T09:23:14.828873+00:00

libvirt-10.7.0-1.1 on GA media

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-8235 Withdrawn: UBUNTU-CVE-2024-8235 2026-10-16T09:23:14.828889+00:00

Withdrawn by the publisher.

Affected: Ubuntu:20.04:LTS: libvirt, Ubuntu:22.04:LTS: libvirt, Ubuntu:24.04:LTS: libvirt

A flaw was found in libvirt. A refactor of the code fetching the list of interfaces for multiple APIs introduced a corner case on platforms where allocating 0 bytes of memory results in a NULL pointer. This corner case would lead to a NULL-pointer dereference and subsequent crash of virtinterfaced. This issue could allow clients connecting to the read-only socket to crash the virtinterfaced daemon.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3406 WID-SEC-W-2024-3406 — libvirt: Schwachstelle ermöglicht Denial of Service 2026-10-16T09:23:14.828911+00:00

Ein lokaler Angreifer kann eine Schwachstelle in libvirt ausnutzen, um einen Denial of Service Angriff durchzuführen.