ThreatCluster

Libvirt Vulnerabilities CVE-2024-2496 and CVE-2024-1441 Published

First seen 18 Feb 2026, 09:15 UTC Api.Msrc.Microsoft 41

Article Content

Browse articles
ThreatCluster

Two vulnerabilities in Libvirt have been disclosed, affecting systems using this virtualization API. CVE-2024-2496 involves a null pointer dereference in the function udevconnectlistallinterfaces(), while CVE-2024-1441 is related to an off-by-one error in udevlistinterfacesbystatus(). Both vulnerabilities were published in March 2024.

Timeline

2024-03-11
CVE-2024-1441 published
2024-03-18
CVE-2024-2496 published
2026-02-18
Information published about both vulnerabilities