From d9eac9bb54fd2b74073fec8ac3ad13ce9875d90b Mon Sep 17 00:00:00 2001 From: Peter Krempa Date: Thu, 29 Aug 2024 10:53:25 +0200 Subject: [PATCH] NEWS: Mention fix for CVE-2024-8235 Signed-off-by: Peter Krempa Reviewed-by: Jiri Denemark --- NEWS.rst | 12 ++++++++++++ 1 file changed, 12 insertions(+) diff --git a/NEWS.rst b/NEWS.rst index 9234e70590..755f51d5b7 100644 --- a/NEWS.rst +++ b/NEWS.rst @@ -13,6 +13,18 @@ v10.7.0 (unreleased) * **Security** + * CVE-2024-8235: Crash of ``virtinterfaced`` via ``virConnectListInterfaces()`` + + A refactor of the code fetching the list of interfaces for multiple APIs + introduced corner case on platforms where allocating 0 bytes of memory + results in a NULL pointer. + + This corner case would lead to a NULL-pointer dereference and subsequent + crash of ``virtinterfaced`` if ``virConnectListInterfaces()`` is called + requesting 0 networks to be filled. + + The bug was introduced in libvirt-10.4.0 + * **Removed features** * **New features** -- 2.39.5