CVE-2026-18917

Name of the Vulnerable Software and Affected Versions libvirt (affected versions not specified)

Description An unprivileged local user can exploit an integer overflow in the NodeGetFreePages RPC handler. This flaw allows crafted values to bypass a size check, resulting in an undersized memory buffer. Consequently, NUMA (Non-Uniform Memory Access, a memory design used in multiprocessing) node data can overwrite this buffer. This heap buffer overflow can corrupt the root libvirt daemon's memory, potentially leading to a denial of service or local privilege escalation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.