CVE-2024-4693
Qemu-kvm: virtio-pci: improper release of configure vector leads to guest triggerable crash
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Qemu-kvm: virtio-pci: improper release of configure vector leads to guest triggerable crash
| Assigner | redhat |
| Reserved | 2024-05-09 |
| Published | 2024-05-10 |
| Updated | 2024-10-22 |
A flaw was found in the QEMU Virtio PCI Bindings (hw/virtio/virtio-pci.c). An improper release and use of the irqfd for vector 0 during the boot process leads to a guest triggerable crash via vhost_net_stop(). This flaw allows a malicious guest to crash the QEMU process on the host.
| CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Operation on a Resource after Expiration or Release
| 2024-05-10: | Reported to Red Hat. |
| 2024-05-10: | Made public. |
https://access.redhat.com/security/cve/CVE-2024-4693
https://bugzilla.redhat.com/show_bug.cgi?id=2279965 (RHBZ#2279965)
