REDHAT-BUG-2313760
First published: Fri Sep 20 2024(Updated: )
A flaw was found in QEMU in the virtio-scsi, virtio-blk and virtio-crypto devices. The size for virtqueue_push as set in virtio_scsi_complete_req / virtio_blk_req_complete / virito_crypto_req_complete could be larger than the true size of the data which has been sent to guest. Once virtqueue_push() finally calls dma_memory_unmap to ummap the in_iov, it may call the address_space_write function to write back the data. Some uninitialized data may exist in the bounce.buffer, leading to an information leak. Upstream fix: <a href="https://gitlab.com/qemu-project/qemu/-/commit/637b0aa139565cb82a7b9269e62214f87082635c">https://gitlab.com/qemu-project/qemu/-/commit/637b0aa139565cb82a7b9269e62214f87082635c</a>
| Affected Software | Affected Version | How to fix |
|---|---|---|
| QEMU |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of REDHAT-BUG-2313760?
The severity of REDHAT-BUG-2313760 is considered high due to potential data integrity issues.
How do I fix REDHAT-BUG-2313760?
To fix REDHAT-BUG-2313760, users should update to the latest version of QEMU that contains the patch addressing this vulnerability.
What components are affected by REDHAT-BUG-2313760?
REDHAT-BUG-2313760 affects the virtio-scsi, virtio-blk, and virtio-crypto devices in QEMU.
Can REDHAT-BUG-2313760 lead to a denial of service?
Yes, REDHAT-BUG-2313760 could potentially lead to denial of service due to incorrect handling of data sizes.
What environments are impacted by REDHAT-BUG-2313760?
REDHAT-BUG-2313760 impacts environments utilizing QEMU virtualization technology with the affected virtio devices.
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2024-8612
- agent/severity
- agent/references
- agent/first-publish-date
- agent/event
- agent/last-modified-date
- agent/description
- agent/type
- agent/source
- agent/softwarecombine
- agent/tags
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/qemu
- canonical/qemu