CyberRota Analysis
AI-GeneratedAn integer overflow vulnerability in the NodeGetFreePages RPC handler of libvirt allows unprivileged local users to bypass size checks, resulting in a heap buffer overflow. This can corrupt the memory of the root libvirt daemon, potentially leading to denial of service or local privilege escalation. Organizations using libvirt should prioritize patching this vulnerability to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A flaw was found in libvirt. An unprivileged local user could exploit an integer overflow vulnerability in the NodeGetFreePages RPC handler. This flaw allows crafted values to bypass a size check, leading to an undersized memory buffer. Subsequently, real NUMA node data can overwrite this buffer. This heap buffer overflow can corrupt the root libvirt daemon's memory, potentially leading to a denial of service or local privilege escalation.