CVE-2024-6519: QEMU SCSI Use-After-Free Local Privilege Escalation Vulnerability
A use-after-free vulnerability was found in the QEMU LSI53C895A SCSI Host Bus Adapter emulation. This issue can lead to a crash or VM escape.
Other sources
There is an use-after-free vulnerability in QEMU LSI53C895A SCSI Host Bus Adapter emulation, which can lead to VM escape. The crash noticed in this case is an write to freed memory. But given the complexity of the freed structure, multiple primitives like dereferencing function pointers, etc., should be possible.
— Red Hat
This vulnerability allows local attackers to escalate privileges on affected installations of QEMU. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the implementation of the virtual LSI53C895A SCSI Host Bus Adapter. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of the hypervisor.
— ZDI
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-6519?
CVE-2024-6519 is considered to have a high severity due to its potential for VM escape and system crashes.
What systems are affected by CVE-2024-6519?
CVE-2024-6519 affects the QEMU KVM environment specifically targeting the LSI53C895A SCSI Host Bus Adapter.
How do I fix CVE-2024-6519?
To fix CVE-2024-6519, you should update QEMU to the latest version that addresses this vulnerability.
Can CVE-2024-6519 be exploited remotely?
CVE-2024-6519 can potentially be exploited remotely if the affected QEMU configuration is exposed to untrusted users.
What is the impact of not addressing CVE-2024-6519?
Not addressing CVE-2024-6519 can lead to crashes or allow attackers to escape the virtual machine environment, compromising host security.