CVE-2024-31420: Red Hat Openshift Virtualization 4

Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days.

A NULL pointer dereference flaw was found in KubeVirt. This flaw allows an attacker who has access to a virtual machine guest on a node with DownwardMetrics enabled to cause a denial of service by issuing a high number of calls to vm-dump-metrics --virtio and then deleting the virtual machine.

Affected products

• Red Hat Red Hat Openshift Virtualization 4

Published 2024-04-03. Last modified 2026-06-17.