Is CVE-2024-2496 in the CISA KEV catalog?

No. CVE-2024-2496 is not currently on the CISA Known Exploited Vulnerabilities list.

What is the CVSS severity of CVE-2024-2496?

CVE-2024-2496 has a CVSS v3 base score of 5.0 (MEDIUM).

What is the EPSS score for CVE-2024-2496?

CVE-2024-2496 has an EPSS score of 0.25% (16th percentile), estimating the probability of exploitation in the next 30 days.

How do I fix CVE-2024-2496?

Upgrade libvirt on debian 11 to 7.0.0-3+deb11u3 or later. Fixes are available for 119 affected products.

CVE & CISA-KEV Catalog

CVE-2024-2496

MEDIUM

5.0

CVSS v3

NVD

Description

A NULL pointer dereference flaw was found in the udevConnectListAllInterfaces() function in libvirt. This issue can occur when detaching a host interface while at the same time collecting the list of interfaces via virConnectListAllInterfaces API. This flaw could be used to perform a denial of service attack by causing the libvirt daemon to crash.

CWE-476NULL Pointer Dereference

How to fix

Remediation Available

libvirtDebian

Fixed in:7.0.0-3+deb11u3CVE-2024-2496

Fixed in:9.0.0-4+deb12u1CVE-2024-2496

Fixed in:9.8.0-1CVE-2024-2496

libvirtRocky

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirtRed Hat / RHEL

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-clientRed Hat / RHEL

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-clientRocky

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-client-debuginfoRocky

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-client-debuginfoRed Hat / RHEL

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-client-qemuRocky

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-client-qemuRed Hat / RHEL

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-daemonRed Hat / RHEL

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-daemonRocky

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-daemon-commonRed Hat / RHEL

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-daemon-commonRocky

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-daemon-common-debuginfoRocky

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-daemon-common-debuginfoRed Hat / RHEL

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-daemon-config-networkRocky

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-daemon-config-networkRed Hat / RHEL

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-daemon-config-nwfilterRocky

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-daemon-config-nwfilterRed Hat / RHEL

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-daemon-debuginfoRocky

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-daemon-debuginfoRed Hat / RHEL

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-daemon-driver-interfaceRed Hat / RHEL

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-daemon-driver-interfaceRocky

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-daemon-driver-interface-debuginfoRed Hat / RHEL

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-daemon-driver-interface-debuginfoRocky

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-daemon-driver-networkRocky

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-daemon-driver-networkRed Hat / RHEL

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-daemon-driver-network-debuginfoRocky

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-daemon-driver-network-debuginfoRed Hat / RHEL

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-daemon-driver-nodedevRocky

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-daemon-driver-nodedevRed Hat / RHEL

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-daemon-driver-nodedev-debuginfoRed Hat / RHEL

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-daemon-driver-nodedev-debuginfoRocky

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-daemon-driver-nwfilterRocky

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-daemon-driver-nwfilterRed Hat / RHEL

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-daemon-driver-nwfilter-debuginfoRocky

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-daemon-driver-nwfilter-debuginfoRed Hat / RHEL

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-daemon-driver-qemuRocky

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-daemon-driver-qemuRed Hat / RHEL

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-daemon-driver-qemu-debuginfoRocky

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-daemon-driver-qemu-debuginfoRed Hat / RHEL

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-daemon-driver-secretRed Hat / RHEL

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-daemon-driver-secretRocky

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-daemon-driver-secret-debuginfoRed Hat / RHEL

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-daemon-driver-secret-debuginfoRocky

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-daemon-driver-storageRed Hat / RHEL

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-daemon-driver-storageRocky

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-daemon-driver-storage-coreRed Hat / RHEL

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-daemon-driver-storage-coreRocky

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-daemon-driver-storage-core-debuginfoRocky

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-daemon-driver-storage-core-debuginfoRed Hat / RHEL

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-daemon-driver-storage-diskRed Hat / RHEL

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-daemon-driver-storage-diskRocky

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-daemon-driver-storage-disk-debuginfoRocky

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-daemon-driver-storage-disk-debuginfoRed Hat / RHEL

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-daemon-driver-storage-iscsiRed Hat / RHEL

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-daemon-driver-storage-iscsiRocky

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-daemon-driver-storage-iscsi-debuginfoRed Hat / RHEL

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-daemon-driver-storage-iscsi-debuginfoRocky

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-daemon-driver-storage-logicalRocky

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-daemon-driver-storage-logicalRed Hat / RHEL

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-daemon-driver-storage-logical-debuginfoRocky

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-daemon-driver-storage-logical-debuginfoRed Hat / RHEL

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-daemon-driver-storage-mpathRocky

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-daemon-driver-storage-mpathRed Hat / RHEL

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-daemon-driver-storage-mpath-debuginfoRocky

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-daemon-driver-storage-mpath-debuginfoRed Hat / RHEL

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-daemon-driver-storage-rbdRed Hat / RHEL

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-daemon-driver-storage-rbdRocky

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-daemon-driver-storage-rbd-debuginfoRocky

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-daemon-driver-storage-rbd-debuginfoRed Hat / RHEL

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-daemon-driver-storage-scsiRed Hat / RHEL

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-daemon-driver-storage-scsiRocky

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-daemon-driver-storage-scsi-debuginfoRocky

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-daemon-driver-storage-scsi-debuginfoRed Hat / RHEL

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-daemon-kvmRed Hat / RHEL

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-daemon-kvmRocky

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-daemon-lockRed Hat / RHEL

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-daemon-lockRocky

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-daemon-lock-debuginfoRocky

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-daemon-lock-debuginfoRed Hat / RHEL

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-daemon-logRocky

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-daemon-logRed Hat / RHEL

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-daemon-log-debuginfoRocky

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-daemon-log-debuginfoRed Hat / RHEL

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-daemon-plugin-lockdRed Hat / RHEL

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-daemon-plugin-lockdRocky

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-daemon-plugin-lockd-debuginfoRed Hat / RHEL

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-daemon-plugin-lockd-debuginfoRocky

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-daemon-plugin-sanlockRed Hat / RHEL

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-daemon-plugin-sanlockRocky

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-daemon-plugin-sanlock-debuginfoRocky

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-daemon-plugin-sanlock-debuginfoRed Hat / RHEL

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-daemon-proxyRed Hat / RHEL

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-daemon-proxyRocky

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-daemon-proxy-debuginfoRed Hat / RHEL

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-daemon-proxy-debuginfoRocky

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-debuginfoRed Hat / RHEL

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-debuginfoRocky

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-debugsourceRed Hat / RHEL

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-debugsourceRocky

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-develRed Hat / RHEL

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-develRocky

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-docsRed Hat / RHEL

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-docsRocky

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-libsRocky

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-libsRed Hat / RHEL

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-libs-debuginfoRocky

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-libs-debuginfoRed Hat / RHEL

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-nssRocky

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-nssRed Hat / RHEL

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-nss-debuginfoRocky

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-nss-debuginfoRed Hat / RHEL

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-wireshark-debuginfoRocky

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirt-wireshark-debuginfoRed Hat / RHEL

Fixed in:0:10.0.0-6.el9_4RHSA-2024:2236

libvirtUbuntu

Fixed in:6.0.0-0ubuntu8.19USN-6734-1

Fixed in:8.0.0-1ubuntu7.10USN-6734-1

Fixed in:9.6.0-1ubuntu1.1USN-6734-1

libvirt-daemonUbuntu

Fixed in:6.0.0-0ubuntu8.19USN-6734-1

Fixed in:8.0.0-1ubuntu7.10USN-6734-1

Fixed in:9.6.0-1ubuntu1.1USN-6734-1

libvirt-daemon-systemUbuntu

Fixed in:6.0.0-0ubuntu8.19USN-6734-1

Fixed in:8.0.0-1ubuntu7.10USN-6734-1

Fixed in:9.6.0-1ubuntu1.1USN-6734-1

libvirt0Ubuntu

Fixed in:6.0.0-0ubuntu8.19USN-6734-1

Fixed in:8.0.0-1ubuntu7.10USN-6734-1

Fixed in:9.6.0-1ubuntu1.1USN-6734-1

Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.

CVSS v3 Vector

Exploitability

Attack VectorLocal

Attack ComplexityLow

Privileges RequiredLow

User InteractionRequired

ScopeUnchanged

Impact

ConfidentialityNone

IntegrityNone

AvailabilityHigh

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H

Exploit Intelligence

0.25%probability of exploitation in 30 days

16thpercentile

Low risk: more likely to be exploited than 16% of all known CVEs.

References

Patch1

bugzilla.redhat.com

Third-Party Advisory2

Mailing List1

lists.debian.org

Related Vulnerabilities

Other CWE-476 (NULL Pointer Dereference) vulnerabilities, ordered by exploit likelihood. View all

CVE	Severity	CVSS	EPSS	Exploited	Fix
CVE-2023-21758	High	7.5	92%	-	Fix
CVE-2023-21547	High	7.5	88%	-	Fix
CVE-2014-3470	Medium	4.3	86%	-	Fix
CVE-2021-44224	High	8.2	82%	-	Fix
CVE-2016-0742	High	7.5	82%	-	Fix
CVE-2009-1386	Medium	5.0	80%	-	Fix

Embed a live status badge for CVE-2024-2496

Markdown

[![CVE-2024-2496](https://tridentstack.com/cve/badge/CVE-2024-2496.svg)](https://tridentstack.com/cve/CVE-2024-2496)

HTML

<a href="https://tridentstack.com/cve/CVE-2024-2496"><img src="https://tridentstack.com/cve/badge/CVE-2024-2496.svg" alt="CVE-2024-2496"></a>

Find and fix vulnerabilities across your fleet

TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.

Start free

This product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2025-04-09.