CVE-2024-26327: Buffer Overflow
An issue was discovered in QEMU 7.1.0 through 8.2.1. registervfs in hw/pci/pciesriov.c mishandles the situation where a guest writes NumVFs greater than TotalVFs, leading to a buffer overflow in VF implementations.
Other sources
An issue was discovered in QEMU 7.1.0 through 8.2.1. The registervfs() function in hw/pci/pciesriov.c mishandles the situation where a guest writes NumVFs greater than TotalVFs, leading to a buffer overflow in VF implementations.
Reference: https://lore.kernel.org/all/20240214-reuse-v4-5-89ad093a07f4@daynix.com/
— Red Hat
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
redhat/qemu-kvmto a version that resolves this vulnerability.Fixed in 9.0.0 - Upgrade
Upgrade
debian/qemuto a version that resolves this vulnerability.Fixed in 1:7.2+dfsg-7+deb12u6 - Upgrade
Upgrade
debian/qemuto a version that resolves this vulnerability.Fixed in 1:8.2.3+ds-1 - Upgrade
Upgrade
debian/qemuto a version that resolves this vulnerability.Fixed in 1:7.2+dfsg-7+deb12u18Fixed in 1:7.2+dfsg-7+deb12u15Fixed in 1:10.0.13+ds-0+deb13u1Fixed in 1:10.0.2+ds-2+deb13u1Fixed in 1:11.1.2+ds-3Fixed in 1:11.1.3+ds-1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-26327?
CVE-2024-26327 has a high severity level due to the potential for buffer overflow vulnerabilities.
How do I fix CVE-2024-26327?
To fix CVE-2024-26327, upgrade to the patched versions of QEMU as specified by your distribution.
What systems are affected by CVE-2024-26327?
CVE-2024-26327 affects QEMU versions 7.1.0 through 8.2.1 and related implementations like QEMU-KVM.
What type of vulnerability is CVE-2024-26327?
CVE-2024-26327 is a buffer overflow vulnerability resulting from improper handling of virtual function configuration.
Is CVE-2024-26327 exploitable remotely?
Yes, CVE-2024-26327 is considered potentially exploitable in a network context, depending on the configuration of the virtual environment.