CVE-2024-4693
Qemu-kvm: virtio-pci: improper release of configure vector leads to guest triggerable crash
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Qemu-kvm: virtio-pci: improper release of configure vector leads to guest triggerable crash
A flaw was found in the QEMU Virtio PCI Bindings (hw/virtio/virtio-pci.c). An improper release and use of the irqfd for vector 0 during the boot process leads to a guest triggerable crash via vhost_net_stop(). This flaw allows a malicious guest to crash the QEMU process on the host.
Reserved 2024-05-09 | Published 2024-05-10 | Updated 2024-11-13 | Assigner redhatOperation on a Resource after Expiration or Release
| 2024-05-10: | Reported to Red Hat. |
| 2024-05-10: | Made public. |
access.redhat.com/security/cve/CVE-2024-4693
bugzilla.redhat.com/show_bug.cgi?id=2279965 (RHBZ#2279965)
Support options
