A NULL pointer dereference flaw was found in the udevConnectListAllInterfaces() function in libvirt. (CVE-2024-2496)
A NULL pointer dereference vulnerability exists in the udevConnectListAllInterfaces() function of libvirt. This flaw occurs when detaching a host interface concurrently with collecting the list of interfaces via the virConnectListAllInterfaces API, potentially causing the libvirt daemon to crash and resulting in a denial of service. The issue affects multiple Red Hat Enterprise Linux 9 variants and related packages. A security update addressing this vulnerability is available from Red Hat.
AI Analysis
Technical Summary
CVE-2024-2496 is a NULL pointer dereference vulnerability in the udevConnectListAllInterfaces() function within libvirt. The flaw manifests when a host interface is detached simultaneously as the virConnectListAllInterfaces API is used to collect interface lists, leading to a crash of the libvirt daemon. This results in a denial of service condition. The vulnerability has a CVSS 3.1 base score of 5.5 (medium severity) with an attack vector of local, low complexity, and low privileges required. Red Hat has released patches for affected versions of libvirt in Red Hat Enterprise Linux 9 and related distributions. No known exploits are reported in the wild.
Potential Impact
The vulnerability can cause the libvirt daemon to crash, resulting in a denial of service. There is no impact on confidentiality or integrity. The flaw requires local access with low privileges and no user interaction. The availability impact is high due to potential service disruption.
Mitigation Recommendations
A security update fixing this vulnerability is available from Red Hat for affected versions of libvirt in Red Hat Enterprise Linux 9 and related packages. Users should apply the updated packages as per Red Hat's advisory. After installation, the libvirt daemon (libvirtd) will be restarted automatically. No alternative mitigations meeting Red Hat's criteria are currently available.
A NULL pointer dereference flaw was found in the udevConnectListAllInterfaces() function in libvirt. (CVE-2024-2496)
Description
A NULL pointer dereference vulnerability exists in the udevConnectListAllInterfaces() function of libvirt. This flaw occurs when detaching a host interface concurrently with collecting the list of interfaces via the virConnectListAllInterfaces API, potentially causing the libvirt daemon to crash and resulting in a denial of service. The issue affects multiple Red Hat Enterprise Linux 9 variants and related packages. A security update addressing this vulnerability is available from Red Hat.
CVSS v3.1
Score 5.5medium
Affected software
pkg:rpm/redhat/libvirtRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2024-2496 is a NULL pointer dereference vulnerability in the udevConnectListAllInterfaces() function within libvirt. The flaw manifests when a host interface is detached simultaneously as the virConnectListAllInterfaces API is used to collect interface lists, leading to a crash of the libvirt daemon. This results in a denial of service condition. The vulnerability has a CVSS 3.1 base score of 5.5 (medium severity) with an attack vector of local, low complexity, and low privileges required. Red Hat has released patches for affected versions of libvirt in Red Hat Enterprise Linux 9 and related distributions. No known exploits are reported in the wild.
Potential Impact
The vulnerability can cause the libvirt daemon to crash, resulting in a denial of service. There is no impact on confidentiality or integrity. The flaw requires local access with low privileges and no user interaction. The availability impact is high due to potential service disruption.
Mitigation Recommendations
A security update fixing this vulnerability is available from Red Hat for affected versions of libvirt in Red Hat Enterprise Linux 9 and related packages. Users should apply the updated packages as per Red Hat's advisory. After installation, the libvirt daemon (libvirtd) will be restarted automatically. No alternative mitigations meeting Red Hat's criteria are currently available.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2024:2236
- Cve Count
- 1
- Additional Cves
- []
- Cvss Version
- null
Threat ID: 6a3da1f84853345fc183507a
Added to database: 06/25/2026, 21:47:36 UTC
Last enriched: 08/20/2026, 16:55:08 UTC
Last updated: 08/23/2026, 22:52:02 UTC
Views: 109
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.