CVE-2025-14876: Qemu-kvm: unbounded allocation in virtio-crypto
A flaw was found in the virtio-crypto device of QEMU. A malicious guest operating system can exploit a missing length limit in the AKCIPHER path, leading to uncontrolled memory allocation. This can result in a denial of service (DoS) on the host system by causing the QEMU process to terminate unexpectedly.
Other sources
A flaw was found in the virtio-crypto device of QEMU. The symmetric path enforces a length limit using conf.maxsize, but the AKCIPHER path does not impose any bound. This could allow a malicious guest to trigger a memory exhaustion condition, potentially resulting in a denial of service (DoS) by aborting the QEMU process on the host.
Upstream patch: https://lore.kernel.org/qemu-devel/20251221024321.143196-1-zhenwei.pi@linux.dev/
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-14876?
CVE-2025-14876 is categorized as a moderate severity vulnerability due to its potential to cause denial of service (DoS) on the host system.
How do I fix CVE-2025-14876?
To fix CVE-2025-14876, ensure that you are using the latest version of QEMU that includes the security patches addressing this vulnerability.
What systems are affected by CVE-2025-14876?
CVE-2025-14876 affects QEMU's virtio-crypto device implementation, allowing malicious guest operating systems to exploit it.
What does CVE-2025-14876 exploit?
CVE-2025-14876 exploits a missing length limit in the AKCIPHER path in QEMU, leading to unbounded memory allocation.
What is the potential impact of CVE-2025-14876?
The potential impact of CVE-2025-14876 includes uncontrolled memory allocation that can result in a denial of service (DoS) on the host system.