A vulnerability was found in libvirt. This security flaw ouccers due to repeatedly querying an SR-IOV PCI device’s capabilities that exposes a memory leak caused by a failure to free the virPCIVirtualFunction array within the parent struct’s g_autoptr cleanup.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Debian | 12 | all | libvirt | < 9.0.0-4 | libvirt_9.0.0-4_all.deb |
Debian | 11 | all | libvirt | < 7.0.0-3+deb11u2 | libvirt_7.0.0-3+deb11u2_all.deb |
Debian | 10 | all | libvirt | < 5.0.0-4+deb10u1 | libvirt_5.0.0-4+deb10u1_all.deb |
Debian | 999 | all | libvirt | < 9.0.0-4 | libvirt_9.0.0-4_all.deb |
Debian | 13 | all | libvirt | < 9.0.0-4 | libvirt_9.0.0-4_all.deb |