REDHAT-BUG-1924601: Low severity qemu vulnerability
An out-of-bound heap buffer access via an interrupt ID field resulting from undefined behaviour. The Interrupt ID of the SGI to forward to the specified CPU interfaces. The value of this field is the Interrupt ID, in the range 0-15, for example a value of 0b0011 specifies Interrupt ID 3.
It requires unusual kernel start-up with 'kernel-irqchip=off'.
This issue does not affect default configuration ie. kernel-irqchip=on.
Upstream patch: --------------- -> https://gitlab.com/qemu-project/qemu/-/commit/edfe2eb4360cde4ed5d95bda7777edcb3510f76a
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1924601?
The severity of REDHAT-BUG-1924601 is classified as high due to potential out-of-bound access that can lead to crashes or exploitation.
How do I fix REDHAT-BUG-1924601?
To fix REDHAT-BUG-1924601, update your QEMU to the latest patched version recommended by the vendor.
What causes REDHAT-BUG-1924601?
REDHAT-BUG-1924601 is caused by an out-of-bound heap buffer access due to an improper handling of the Interrupt ID field.
Which versions of QEMU are affected by REDHAT-BUG-1924601?
REDHAT-BUG-1924601 affects specific versions of QEMU where the out-of-bound access vulnerability is present.
Is there a workaround for REDHAT-BUG-1924601?
Currently, there is no official workaround for REDHAT-BUG-1924601; the recommended action is to apply the security update as soon as possible.