CVE-2024-26327: Buffer Overflow
An issue was discovered in QEMU 7.1.0 through 8.2.1. registervfs in hw/pci/pciesriov.c mishandles the situation where a guest writes NumVFs greater than TotalVFs, leading to a buffer overflow in VF implementations.
Other sources
An issue was discovered in QEMU 7.1.0 through 8.2.1. The registervfs() function in hw/pci/pciesriov.c mishandles the situation where a guest writes NumVFs greater than TotalVFs, leading to a buffer overflow in VF implementations.
Reference: https://lore.kernel.org/all/20240214-reuse-v4-5-89ad093a07f4@daynix.com/
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/qemuto a version that resolves this vulnerability.Fixed in 1:5.2+dfsg-11+deb11u3Fixed in 1:5.2+dfsg-11+deb11u2Fixed in 1:7.2+dfsg-7+deb12u7Fixed in 1:9.0.2+ds-2Fixed in 1:9.1.0+ds-3 - Upgrade
Upgrade
redhat/qemu-kvmto a version that resolves this vulnerability.Fixed in 9.0.0
Event History
Frequently Asked Questions
What is the severity of CVE-2024-26327?
CVE-2024-26327 has a high severity level due to the potential for buffer overflow vulnerabilities.
How do I fix CVE-2024-26327?
To fix CVE-2024-26327, upgrade to the patched versions of QEMU as specified by your distribution.
What systems are affected by CVE-2024-26327?
CVE-2024-26327 affects QEMU versions 7.1.0 through 8.2.1 and related implementations like QEMU-KVM.
What type of vulnerability is CVE-2024-26327?
CVE-2024-26327 is a buffer overflow vulnerability resulting from improper handling of virtual function configuration.
Is CVE-2024-26327 exploitable remotely?
Yes, CVE-2024-26327 is considered potentially exploitable in a network context, depending on the configuration of the virtual environment.