| Reported on: | 20260819 |
|---|---|
| Published on: | 20260824 |
| Fixed on: | 20260824 |
| Reported by: | David Korczynski (Ada Logics) |
|---|---|
| Patched by: | Ján Tomko |
When processing of the disk data returned by the guest agent from the guest failed, hitting the cleanup label, the disks array was freed but the pointer was not cleared, leading to a possible double free.
Malicious guest OS can crash the libvirt daemon.
Disable guest agent for utrusted guests