CVE-2024-8612: Qemu-kvm: information leak in virtio devices
A flaw was found in QEMU in the virtio-scsi, virtio-blk and virtio-crypto devices. The size for virtqueuepush as set in virtioscsicompletereq / virtioblkreqcomplete / viritocryptoreqcomplete could be larger than the true size of the data which has been sent to guest.
Once virtqueuepush() finally calls dmamemoryunmap to ummap the iniov, it may call the addressspacewrite function to write back the data. Some uninitialized data may exist in the bounce.buffer, leading to an information leak.
Upstream fix: https://gitlab.com/qemu-project/qemu/-/commit/637b0aa139565cb82a7b9269e62214f87082635c
Other sources
A flaw was found in QEMU, in the virtio-scsi, virtio-blk, and virtio-crypto devices. The size for virtqueuepush as set in virtioscsicompletereq / virtioblkreqcomplete / viritocryptoreqcomplete could be larger than the true size of the data which has been sent to guest. Once virtqueuepush() finally calls dmamemoryunmap to ummap the iniov, it may call the addressspacewrite function to write back the data. Some uninitialized data may exist in the bounce.buffer, leading to an information leak.
— NVD
Qemu-kvm: information leak in virtio devices
— Microsoft
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 9.1.0-1
Event History
Frequently Asked Questions
What is the severity of CVE-2024-8612?
CVE-2024-8612 has been classified as a medium severity vulnerability due to potential data corruption issues.
How do I fix CVE-2024-8612?
To mitigate CVE-2024-8612, update your QEMU installation to the latest version where the vulnerability is addressed.
What components are affected by CVE-2024-8612?
CVE-2024-8612 affects the virtio-scsi, virtio-blk, and virtio-crypto devices within QEMU.
What is the impact of CVE-2024-8612 on system security?
The impact of CVE-2024-8612 may include potential data corruption when processing requests within virtualized environments.
Is CVE-2024-8612 present in all QEMU versions?
CVE-2024-8612 is found in specific versions of QEMU, so users should review their version against security advisories to determine exposure.