CVE-2023-3301: Triggerable assertion due to race condition in hot-unplug
A flaw was found in QEMU. The async nature of hot-unplug enables a race scenario where the net device backend is cleared before the virtio-net pci frontend has been unplugged. A malicious guest could use this time window to trigger an assertion and cause a denial of service.
Other sources
The async nature of the hot-unplug enables an easy to reproduce race scenario where the net device backend is cleared before the virtio-net pci frontend has been unplugged (or the ACPI unplug has been acked by the guest?). The guest can use this time window to, at least, trigger an assertion.
— Red Hat
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the vulnerability ID for this flaw?
The vulnerability ID for this flaw is CVE-2023-3301.
What is the severity of CVE-2023-3301?
The severity of CVE-2023-3301 is medium with a CVSS score of 5.6.
How does this flaw in QEMU affect the system?
This flaw in QEMU can be exploited by a malicious guest to cause a denial of service.
Which software versions are affected by CVE-2023-3301?
QEMU versions 8.0.3 up to, but excluding, 8.1.0 are affected. Redhat Enterprise Linux 8.0 and 9.0 are also affected.
Is there a fix for CVE-2023-3301?
Yes, a fix is available for CVE-2023-3301. It is recommended to update to version 8.1.0 of QEMU to mitigate the vulnerability.