Skip to main content
CVE-2024-45337VulnerabilityPublished Updated

Red Hat Enhancement Advisory: OpenShift Virtualization 4.17.22 Images

Affects Red HatSource GCVE Database

0
Compare

Not known to be exploited.

Data as of 30 Oct 2026, 21:51 UTC

Severity
High

Rated by Threat Radar · No CVSS score from NVD or the CNA

EPSS
3.1% chance of exploitation in 30 days – higher than 88% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 30 Jul 2025

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponized: evidence found.

    Public exploit code: GitHub proofs of concept

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), GitHub proofs of concept, the Metasploit, Exploit-DB and nuclei-templates index as of 30 Oct 2026.

What to do

AI-suggested

Red Hat recommends applying the OpenShift Virtualization 4.17.22 update, which includes fixes for CVE-2024-45337 and other issues. Before applying this update, ensure that all previously released errata relevant to your system have been applied. Follow the official Red Hat guidance on applying updates at https://access.redhat.com/articles/11258. No additional or alternative mitigations are indicated in the advisory.

Description

Red Hat has released OpenShift Virtualization 4.17.22 images containing fixes for several bugs and security vulnerabilities, including CVE-2024-45337. OpenShift Virtualization is Red Hat's virtualization solution for the OpenShift Container Platform. This update addresses issues such as the need to restart guest VMs after interface hot-plug and repeated patches to virt-launcher pods with multiple SR-IOV NICs. The advisory includes multiple CVEs but does not provide detailed technical descriptions or CVSS scores for CVE-2024-45337 specifically.

References

Community reviews

Loading reviews…