REDHAT-BUG-2443817: High severity Qemu Qemu vulnerability
A flaw was found in QEMU. When reading input audio in the virtio-snd device input callback, the virtiosndpcmincb function did not check whether the iov could fit the data buffer, potentially leading to a heap out-of-bounds write. This issue exists due to an incomplete fix for CVE-2024-7730.
Original issue: https://gitlab.com/qemu-project/qemu/-/issues/2427
Upstream patch series: https://lore.kernel.org/qemu-devel/20260220-virtio-snd-series-v1-0-207c4f7200a2@linaro.org/
QEMU fix commits: https://gitlab.com/qemu-project/qemu/-/commit/bcb53328aa70023f1405fade4e253e7f77567261 https://gitlab.com/qemu-project/qemu/-/commit/7994203bb1b83a6604f3ab00fe9598909bb66164
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Apply the upstream fix commits for QEMU addressing the virtio-snd input callback bounds check issue (heap out-of-bounds write risk) for CVE-2024-7730 incompletely fixed previously: commit 7994203bb1b83a6604f3ab00fe9598909bb66164 and commit bcb53328aa70023f1405fade4e253e7f77567261.
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2443817?
The severity of REDHAT-BUG-2443817 is classified as high, rated at 7.
What vulnerability does REDHAT-BUG-2443817 relate to?
REDHAT-BUG-2443817 is related to an incomplete fix for CVE-2024-7730.
How do I fix REDHAT-BUG-2443817?
To fix REDHAT-BUG-2443817, ensure you update to the latest version of QEMU that includes the necessary patches addressing the flaw.
What are the potential consequences of REDHAT-BUG-2443817?
The potential consequences of REDHAT-BUG-2443817 include a heap out-of-bounds write, which may lead to security vulnerabilities.
Which software is affected by REDHAT-BUG-2443817?
The software affected by REDHAT-BUG-2443817 is QEMU.