CVEvulnerability

CVE-2026-18917

7.8 HIGH Published 2026-08-20 Modified 2026-10-27 Official page ↗
Status
Awaiting Analysis
Published
2026-08-20
Last modified
2026-10-27
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-190

Description

A flaw was found in libvirt. An unprivileged local user could exploit an integer overflow vulnerability in the NodeGetFreePages RPC handler. This flaw allows crafted values to bypass a size check, leading to an undersized memory buffer. Subsequently, real NUMA node data can overwrite this buffer. This heap buffer overflow can corrupt the root libvirt daemon's memory, potentially leading to a denial of service or local privilege escalation.

Related

Weakness · CWE (1)

  • CWE-190 Integer Overflow or Wraparound weakness

References