REDHAT-BUG-2279965: Medium severity qemu vulnerability
A flaw was found in QEMU in the Virtio PCI Bindings (hw/virtio/virtio-pci.c). An improper release and use of the irqfd for vector 0 during the boot process leads to a guest triggerable crash via vhostnetstop().
The original patch [1] was found to be incomplete and is currently being reworked upstream [2][3].
[1] https://gitlab.com/qemu-project/qemu/-/commit/fcbb086ae590e910614fe5b8bf76e264f71ef304 [2] https://gitlab.com/qemu-project/qemu/-/issues/2321 [3] https://gitlab.com/qemu-project/qemu/-/issues/2334
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2279965?
REDHAT-BUG-2279965 is considered a critical vulnerability due to its potential to cause guest crashes.
How do I fix REDHAT-BUG-2279965?
To address REDHAT-BUG-2279965, apply the latest patch provided by the QEMU project when it becomes available.
What systems are affected by REDHAT-BUG-2279965?
REDHAT-BUG-2279965 specifically affects systems running QEMU with Virtio PCI Bindings.
Can REDHAT-BUG-2279965 be exploited remotely?
Yes, REDHAT-BUG-2279965 can be exploited by a guest to trigger a crash in the host environment.
What is the cause of the vulnerability in REDHAT-BUG-2279965?
The vulnerability in REDHAT-BUG-2279965 is caused by improper handling of the irqfd for vector 0 during the QEMU boot process.