CVE-2024-2496

Summary

CVE-2024-2496 is a newly discovered vulnerability in the libvirt library. The issue lies in the udevConnectListAllInterfaces() function, where a NULL pointer dereference can occur when detaching a host interface and simultaneously collecting the list of interfaces using the virConnectListAllInterfaces API. Consequently, an attacker can exploit this flaw to cause a denial of service attack, resulting in the libvirt daemon crashing.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.