REDHAT-BUG-1924601
First published: Wed Feb 03 2021(Updated: )
An out-of-bound heap buffer access via an interrupt ID field resulting from undefined behaviour. The Interrupt ID of the SGI to forward to the specified CPU interfaces. The value of this field is the Interrupt ID, in the range 0-15, for example a value of 0b0011 specifies Interrupt ID 3. It requires unusual kernel start-up with 'kernel-irqchip=off'. This issue does not affect default configuration ie. kernel-irqchip=on. Upstream patch: --------------- -> <a href="https://gitlab.com/qemu-project/qemu/-/commit/edfe2eb4360cde4ed5d95bda7777edcb3510f76a">https://gitlab.com/qemu-project/qemu/-/commit/edfe2eb4360cde4ed5d95bda7777edcb3510f76a</a>
| Affected Software | Affected Version | How to fix |
|---|---|---|
| QEMU |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://gitlab.com/qemu-project/qemu/-/commit/edfe2eb4360cde4ed5d95bda7777edcb3510f76a
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=1924602
- https://bugs.launchpad.net/qemu/+bug/1914353
- https://www.openwall.com/lists/oss-security/2021/02/05/1
- https://access.redhat.com/errata/RHSA-2021:1125
- https://access.redhat.com/security/cve/cve-2021-20221
- https://access.redhat.com/errata/RHSA-2021:2521
- https://access.redhat.com/errata/RHSA-2021:3061
- https://bugzilla.redhat.com/show_bug.cgi?id=1924601
Frequently Asked Questions
What is the severity of REDHAT-BUG-1924601?
The severity of REDHAT-BUG-1924601 is classified as high due to potential out-of-bound access that can lead to crashes or exploitation.
How do I fix REDHAT-BUG-1924601?
To fix REDHAT-BUG-1924601, update your QEMU to the latest patched version recommended by the vendor.
What causes REDHAT-BUG-1924601?
REDHAT-BUG-1924601 is caused by an out-of-bound heap buffer access due to an improper handling of the Interrupt ID field.
Which versions of QEMU are affected by REDHAT-BUG-1924601?
REDHAT-BUG-1924601 affects specific versions of QEMU where the out-of-bound access vulnerability is present.
Is there a workaround for REDHAT-BUG-1924601?
Currently, there is no official workaround for REDHAT-BUG-1924601; the recommended action is to apply the security update as soon as possible.
- agent/type
- agent/first-publish-date
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2021-20221
- agent/severity
- agent/last-modified-date
- agent/references
- agent/description
- agent/event
- agent/source
- agent/tags
- agent/softwarecombine
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/qemu
- canonical/qemu