CVE-2024-8354
Qemu-kvm: usb: assertion failure in usb_ep_get()
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Qemu-kvm: usb: assertion failure in usb_ep_get()
A flaw was found in QEMU. An assertion failure was present in the usb_ep_get() function in hw/net/core.c when trying to get the USB endpoint from a USB device. This flaw may allow a malicious unprivileged guest user to crash the QEMU process on the host and cause a denial of service condition.
Reserved 2024-08-30 | Published 2024-09-19 | Updated 2024-11-12 | Assigner redhat| 2024-09-19: | Reported to Red Hat. |
| 2024-08-30: | Made public. |
Red Hat would like to thank Antoine "Gravis" Assier de Pompignan (Fuzzinglabs) and Patrick Ventuzelo (Fuzzinglabs) for reporting this issue.
access.redhat.com/security/cve/CVE-2024-8354
bugzilla.redhat.com/show_bug.cgi?id=2313497 (RHBZ#2313497)
Support options
