CVE-2024-3446
High · 8.2CVSS
8.2
EPSS
0.3%
Published
Apr 9, 2024
CISA due date
—
Cloudanix analysis
A flaw in the software that runs virtual machines can let someone who already controls a virtual machine crash or take over the main computer that hosts it.
- Exploitation
- Local Privilege
- Attacker needs
- High Privilege
- Complexity
- Moderate
- Impact
- Full Compromise
- Component
- Application
- Class
- Memory Corruption
- Remediation
- Upgrade
- Effort
- Medium
- Patch risk
- Low
What it actually does
Double free condition in QEMU virtio-gpu, virtio-serial-bus, and virtio-crypto devices triggered when the mem_reentrancy_guard flag fails to prevent DMA reentrancy, allowing memory corruption within the QEMU host process.
Why it matters to the business
Privileged guest users can crash the virtualization host or execute code in the QEMU context, leading to denial of service for all hosted virtual machines and potential full host compromise in shared virtualization environments.
How an attack unfolds
An attacker with administrative access inside a guest virtual machine crafts DMA operations against virtio devices that bypass the insufficient reentrancy guard, triggering a double-free that either crashes QEMU or allows controlled memory writes to achieve arbitrary code execution in the host process.
How to fix it
Upgrade QEMU to a version containing the fix for the mem_reentrancy_guard logic in virtio devices; apply the patch from the upstream QEMU project or the relevant distribution vendor as soon as available.
How to confirm the fix worked
Confirm the installed QEMU binary version is newer than the vulnerable release, review commit history for the mem_reentrancy_guard hardening changes, and test that DMA reentrancy test cases no longer trigger crashes or corruption.
Typical attack path
- Obtain privileged (root or equivalent) access inside a guest VM
- Identify and target one of the affected virtio devices (gpu, serial, or crypto)
- Issue a sequence of DMA requests that exploit the reentrancy window
- Trigger the double-free to corrupt QEMU heap structures
- Either crash the process for DoS or chain into code execution in the host context
How to detect it
Review QEMU process crash logs, core dumps, and system logs for repeated virtio device faults or abrupt QEMU terminations; correlate with guest activity that performs heavy DMA or device I/O around the time of the event.
What your security team should do
- Prioritize patching QEMU hosts that expose virtio devices to untrusted or privileged guests
- Restrict administrative access inside guest VMs where possible
- Monitor QEMU process stability and enable enhanced logging for virtio DMA operations
- Review virtualization platform vendor advisories for backported fixes
The record
A double free vulnerability was found in QEMU virtio devices (virtio-gpu, virtio-serial-bus, virtio-crypto), where the mem_reentrancy_guard flag insufficiently protects against DMA reentrancy issues. This issue could allow a malicious privileged guest user to crash the QEMU process on the host, resulting in a denial of service or allow arbitrary code execution within the context of the QEMU process on the host.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| AlmaLinux:8 | SLOF | 0 | 20210217-2.module_el8.10.0+3768+dfd76e10 |
| AlmaLinux:8 | hivex | 0 | 1.3.18-23.module_el8.6.0+2880+7d9e3703 |
| AlmaLinux:8 | hivex | 0 | 1.3.18-23.module_el8.6.0+3161+a07c0ea5 |
| AlmaLinux:8 | hivex-devel | 0 | 1.3.18-23.module_el8.6.0+2880+7d9e3703 |
| AlmaLinux:8 | hivex-devel | 0 | 1.3.18-23.module_el8.6.0+3161+a07c0ea5 |
| AlmaLinux:8 | libguestfs | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | libguestfs-appliance | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | libguestfs-bash-completion | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | libguestfs-devel | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | libguestfs-gfs2 | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | libguestfs-gobject | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | libguestfs-gobject-devel | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | libguestfs-inspect-icons | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | libguestfs-java | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | libguestfs-java-devel | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | libguestfs-javadoc | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | libguestfs-man-pages-ja | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | libguestfs-man-pages-uk | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | libguestfs-rescue | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | libguestfs-rsync | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | libguestfs-tools | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | libguestfs-tools-c | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | libguestfs-winsupport | 0 | 8.10-1.module_el8.10.0+3768+dfd76e10 |
| AlmaLinux:8 | libguestfs-xfs | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | libiscsi | 0 | 1.18.0-8.module_el8.6.0+2880+7d9e3703 |
| AlmaLinux:8 | libiscsi | 0 | 1.18.0-8.module_el8.6.0+3161+a07c0ea5 |
| AlmaLinux:8 | libiscsi-devel | 0 | 1.18.0-8.module_el8.6.0+2880+7d9e3703 |
| AlmaLinux:8 | libiscsi-devel | 0 | 1.18.0-8.module_el8.6.0+3161+a07c0ea5 |
| AlmaLinux:8 | libiscsi-utils | 0 | 1.18.0-8.module_el8.6.0+2880+7d9e3703 |
| AlmaLinux:8 | libiscsi-utils | 0 | 1.18.0-8.module_el8.6.0+3161+a07c0ea5 |
| AlmaLinux:8 | libnbd | 0 | 1.6.0-6.module_el8.10.0+3897+eb84924d |
| AlmaLinux:8 | libnbd-bash-completion | 0 | 1.6.0-6.module_el8.10.0+3897+eb84924d |
| AlmaLinux:8 | libnbd-devel | 0 | 1.6.0-6.module_el8.10.0+3897+eb84924d |
| AlmaLinux:8 | libtpms | 0 | 0.9.1-2.20211126git1ff6fe1f43.module_el8.9.0+3659+9c8643f3 |
| AlmaLinux:8 | libtpms-devel | 0 | 0.9.1-2.20211126git1ff6fe1f43.module_el8.9.0+3659+9c8643f3 |
| AlmaLinux:8 | libvirt | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt | 0 | 8.0.0-23.2.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | libvirt-client | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-client | 0 | 8.0.0-23.2.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | libvirt-daemon | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-daemon | 0 | 8.0.0-23.2.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | libvirt-daemon-config-network | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-daemon-config-network | 0 | 8.0.0-23.2.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | libvirt-daemon-config-nwfilter | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-daemon-driver-interface | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-daemon-driver-interface | 0 | 8.0.0-23.2.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | libvirt-daemon-driver-network | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-daemon-driver-nodedev | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-daemon-driver-nodedev | 0 | 8.0.0-23.2.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | libvirt-daemon-driver-nwfilter | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-daemon-driver-nwfilter | 0 | 8.0.0-23.2.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | libvirt-daemon-driver-qemu | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-daemon-driver-qemu | 0 | 8.0.0-23.2.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | libvirt-daemon-driver-secret | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-daemon-driver-secret | 0 | 8.0.0-23.2.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | libvirt-daemon-driver-storage | 0 | 8.0.0-23.2.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | libvirt-daemon-driver-storage-core | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-daemon-driver-storage-core | 0 | 8.0.0-23.2.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | libvirt-daemon-driver-storage-disk | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-daemon-driver-storage-disk | 0 | 8.0.0-23.2.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | libvirt-daemon-driver-storage-gluster | 0 | 8.0.0-23.2.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | libvirt-daemon-driver-storage-iscsi | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-daemon-driver-storage-iscsi | 0 | 8.0.0-23.2.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | libvirt-daemon-driver-storage-iscsi-direct | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-daemon-driver-storage-iscsi-direct | 0 | 8.0.0-23.2.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | libvirt-daemon-driver-storage-logical | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-daemon-driver-storage-logical | 0 | 8.0.0-23.2.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | libvirt-daemon-driver-storage-mpath | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-daemon-driver-storage-mpath | 0 | 8.0.0-23.2.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | libvirt-daemon-driver-storage-rbd | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-daemon-driver-storage-rbd | 0 | 8.0.0-23.2.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | libvirt-daemon-driver-storage-scsi | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-daemon-driver-storage-scsi | 0 | 8.0.0-23.2.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | libvirt-daemon-kvm | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-daemon-kvm | 0 | 8.0.0-23.2.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | libvirt-dbus | 0 | 1.3.0-2.module_el8.6.0+2880+7d9e3703 |
| AlmaLinux:8 | libvirt-dbus | 0 | 1.3.0-2.module_el8.6.0+3161+a07c0ea5 |
| AlmaLinux:8 | libvirt-devel | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-devel | 0 | 8.0.0-23.2.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | libvirt-docs | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-docs | 0 | 8.0.0-23.2.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | libvirt-libs | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-libs | 0 | 8.0.0-23.2.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | libvirt-lock-sanlock | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-lock-sanlock | 0 | 8.0.0-23.2.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | libvirt-nss | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-nss | 0 | 8.0.0-23.2.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | libvirt-wireshark | 0 | 8.0.0-23.2.module_el8.10.0+3867+f3f9981a |
| AlmaLinux:8 | libvirt-wireshark | 0 | 8.0.0-23.2.module_el8.10.0+3869+b8959270 |
| AlmaLinux:8 | lua-guestfs | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | nbdfuse | 0 | 1.6.0-6.module_el8.10.0+3897+eb84924d |
| AlmaLinux:8 | nbdkit | 0 | 1.24.0-5.module_el8.8.0+3485+7cffc4a3 |
| AlmaLinux:8 | nbdkit-bash-completion | 0 | 1.24.0-5.module_el8.8.0+3485+7cffc4a3 |
| AlmaLinux:8 | nbdkit-basic-filters | 0 | 1.24.0-5.module_el8.8.0+3485+7cffc4a3 |
| AlmaLinux:8 | nbdkit-basic-plugins | 0 | 1.24.0-5.module_el8.8.0+3485+7cffc4a3 |
| AlmaLinux:8 | nbdkit-curl-plugin | 0 | 1.24.0-5.module_el8.8.0+3485+7cffc4a3 |
| AlmaLinux:8 | nbdkit-devel | 0 | 1.24.0-5.module_el8.8.0+3485+7cffc4a3 |
| AlmaLinux:8 | nbdkit-example-plugins | 0 | 1.24.0-5.module_el8.8.0+3485+7cffc4a3 |
| AlmaLinux:8 | nbdkit-gzip-filter | 0 | 1.24.0-5.module_el8.8.0+3485+7cffc4a3 |
| AlmaLinux:8 | nbdkit-gzip-plugin | 0 | 1.24.0-5.module_el8.8.0+3485+7cffc4a3 |
| AlmaLinux:8 | nbdkit-linuxdisk-plugin | 0 | 1.24.0-5.module_el8.8.0+3485+7cffc4a3 |
| AlmaLinux:8 | nbdkit-nbd-plugin | 0 | 1.24.0-5.module_el8.8.0+3485+7cffc4a3 |
| AlmaLinux:8 | nbdkit-python-plugin | 0 | 1.24.0-5.module_el8.8.0+3485+7cffc4a3 |
| AlmaLinux:8 | nbdkit-server | 0 | 1.24.0-5.module_el8.8.0+3485+7cffc4a3 |
| AlmaLinux:8 | nbdkit-ssh-plugin | 0 | 1.24.0-5.module_el8.8.0+3485+7cffc4a3 |
| AlmaLinux:8 | nbdkit-tar-filter | 0 | 1.24.0-5.module_el8.8.0+3485+7cffc4a3 |
| AlmaLinux:8 | nbdkit-tar-plugin | 0 | 1.24.0-5.module_el8.8.0+3485+7cffc4a3 |
| AlmaLinux:8 | nbdkit-tmpdisk-plugin | 0 | 1.24.0-5.module_el8.8.0+3485+7cffc4a3 |
| AlmaLinux:8 | nbdkit-vddk-plugin | 0 | 1.24.0-5.module_el8.8.0+3485+7cffc4a3 |
| AlmaLinux:8 | nbdkit-xz-filter | 0 | 1.24.0-5.module_el8.8.0+3485+7cffc4a3 |
| AlmaLinux:8 | netcf | 0 | 0.2.8-12.module_el8.6.0+2880+7d9e3703 |
| AlmaLinux:8 | netcf | 0 | 0.2.8-12.module_el8.6.0+3161+a07c0ea5 |
| AlmaLinux:8 | netcf-devel | 0 | 0.2.8-12.module_el8.6.0+2880+7d9e3703 |
| AlmaLinux:8 | netcf-devel | 0 | 0.2.8-12.module_el8.6.0+3161+a07c0ea5 |
| AlmaLinux:8 | netcf-libs | 0 | 0.2.8-12.module_el8.6.0+2880+7d9e3703 |
| AlmaLinux:8 | netcf-libs | 0 | 0.2.8-12.module_el8.6.0+3161+a07c0ea5 |
| AlmaLinux:8 | ocaml-hivex | 0 | 1.3.18-23.module_el8.6.0+2880+7d9e3703 |
| AlmaLinux:8 | ocaml-hivex | 0 | 1.3.18-23.module_el8.6.0+3161+a07c0ea5 |
| AlmaLinux:8 | ocaml-hivex-devel | 0 | 1.3.18-23.module_el8.6.0+2880+7d9e3703 |
| AlmaLinux:8 | ocaml-hivex-devel | 0 | 1.3.18-23.module_el8.6.0+3161+a07c0ea5 |
| AlmaLinux:8 | ocaml-libguestfs | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | ocaml-libguestfs-devel | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | ocaml-libnbd | 0 | 1.6.0-6.module_el8.10.0+3897+eb84924d |
| AlmaLinux:8 | ocaml-libnbd-devel | 0 | 1.6.0-6.module_el8.10.0+3897+eb84924d |
| AlmaLinux:8 | perl-Sys-Guestfs | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | perl-Sys-Virt | 0 | 8.0.0-1.module_el8.6.0+2880+7d9e3703 |
| AlmaLinux:8 | perl-Sys-Virt | 0 | 8.0.0-1.module_el8.6.0+3161+a07c0ea5 |
| AlmaLinux:8 | perl-hivex | 0 | 1.3.18-23.module_el8.6.0+2880+7d9e3703 |
| AlmaLinux:8 | perl-hivex | 0 | 1.3.18-23.module_el8.6.0+3161+a07c0ea5 |
| AlmaLinux:8 | python3-hivex | 0 | 1.3.18-23.module_el8.6.0+2880+7d9e3703 |
| AlmaLinux:8 | python3-hivex | 0 | 1.3.18-23.module_el8.6.0+3161+a07c0ea5 |
| AlmaLinux:8 | python3-libguestfs | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | python3-libnbd | 0 | 1.6.0-6.module_el8.10.0+3897+eb84924d |
| AlmaLinux:8 | python3-libvirt | 0 | 8.0.0-2.module_el8.7.0+3346+68867adb |
| AlmaLinux:8 | qemu-guest-agent | 0 | 15:6.2.0-53.module_el8.10.0+3897+eb84924d |
| AlmaLinux:8 | qemu-img | 0 | 15:6.2.0-53.module_el8.10.0+3897+eb84924d |
| AlmaLinux:8 | qemu-kvm | 0 | 15:6.2.0-53.module_el8.10.0+3897+eb84924d |
| AlmaLinux:8 | qemu-kvm-block-curl | 0 | 15:6.2.0-53.module_el8.10.0+3897+eb84924d |
| AlmaLinux:8 | qemu-kvm-block-gluster | 0 | 15:6.2.0-53.module_el8.10.0+3897+eb84924d |
| AlmaLinux:8 | qemu-kvm-block-iscsi | 0 | 15:6.2.0-53.module_el8.10.0+3897+eb84924d |
| AlmaLinux:8 | qemu-kvm-block-rbd | 0 | 15:6.2.0-53.module_el8.10.0+3897+eb84924d |
| AlmaLinux:8 | qemu-kvm-block-ssh | 0 | 15:6.2.0-53.module_el8.10.0+3897+eb84924d |
| AlmaLinux:8 | qemu-kvm-common | 0 | 15:6.2.0-53.module_el8.10.0+3897+eb84924d |
| AlmaLinux:8 | qemu-kvm-core | 0 | 15:6.2.0-53.module_el8.10.0+3897+eb84924d |
| AlmaLinux:8 | qemu-kvm-docs | 0 | 15:6.2.0-53.module_el8.10.0+3897+eb84924d |
| AlmaLinux:8 | qemu-kvm-hw-usbredir | 0 | 15:6.2.0-53.module_el8.10.0+3897+eb84924d |
| AlmaLinux:8 | qemu-kvm-tests | 0 | 15:6.2.0-53.module_el8.10.0+3897+eb84924d |
| AlmaLinux:8 | qemu-kvm-ui-opengl | 0 | 15:6.2.0-53.module_el8.10.0+3897+eb84924d |
| AlmaLinux:8 | qemu-kvm-ui-spice | 0 | 15:6.2.0-53.module_el8.10.0+3897+eb84924d |
| AlmaLinux:8 | ruby-hivex | 0 | 1.3.18-23.module_el8.6.0+2880+7d9e3703 |
| AlmaLinux:8 | ruby-hivex | 0 | 1.3.18-23.module_el8.6.0+3161+a07c0ea5 |
| AlmaLinux:8 | ruby-libguestfs | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | seabios | 0 | 1.16.0-4.module_el8.9.0+3659+9c8643f3 |
| AlmaLinux:8 | seabios-bin | 0 | 1.16.0-4.module_el8.9.0+3659+9c8643f3 |
| AlmaLinux:8 | seavgabios-bin | 0 | 1.16.0-4.module_el8.9.0+3659+9c8643f3 |
| AlmaLinux:8 | sgabios | 0 | 1:0.20170427git-3.module_el8.6.0+2880+7d9e3703 |
| AlmaLinux:8 | sgabios-bin | 0 | 1:0.20170427git-3.module_el8.6.0+2880+7d9e3703 |
| AlmaLinux:8 | supermin | 0 | 5.2.1-2.module_el8.7.0+3346+68867adb |
| AlmaLinux:8 | supermin-devel | 0 | 5.2.1-2.module_el8.7.0+3346+68867adb |
| AlmaLinux:8 | swtpm | 0 | 0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb |
| AlmaLinux:8 | swtpm-devel | 0 | 0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb |
| AlmaLinux:8 | swtpm-libs | 0 | 0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb |
| AlmaLinux:8 | swtpm-tools | 0 | 0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb |
| AlmaLinux:8 | swtpm-tools-pkcs11 | 0 | 0.7.0-4.20211109gitb79fd91.module_el8.7.0+3346+68867adb |
| AlmaLinux:8 | virt-dib | 0 | 1:1.44.0-9.module_el8.7.0+3493+5ed0bd1c.alma |
| AlmaLinux:8 | virt-v2v | 0 | 1:1.42.0-22.module_el8.9.0+3659+9c8643f3 |
| AlmaLinux:8 | virt-v2v-bash-completion | 0 | 1:1.42.0-22.module_el8.9.0+3659+9c8643f3 |
| AlmaLinux:8 | virt-v2v-man-pages-ja | 0 | 1:1.42.0-22.module_el8.9.0+3659+9c8643f3 |
| AlmaLinux:8 | virt-v2v-man-pages-uk | 0 | 1:1.42.0-22.module_el8.9.0+3659+9c8643f3 |
| AlmaLinux:9 | qemu-guest-agent | 0 | 17:9.0.0-10.el9_5 |
| AlmaLinux:9 | qemu-img | 0 | 17:9.0.0-10.el9_5 |
| AlmaLinux:9 | qemu-kvm | 0 | 17:9.0.0-10.el9_5 |
| AlmaLinux:9 | qemu-kvm-audio-pa | 0 | 17:9.0.0-10.el9_5 |
| AlmaLinux:9 | qemu-kvm-block-blkio | 0 | 17:9.0.0-10.el9_5 |
| AlmaLinux:9 | qemu-kvm-block-curl | 0 | 17:9.0.0-10.el9_5 |
| AlmaLinux:9 | qemu-kvm-block-rbd | 0 | 17:9.0.0-10.el9_5 |
| AlmaLinux:9 | qemu-kvm-common | 0 | 17:9.0.0-10.el9_5 |
| AlmaLinux:9 | qemu-kvm-core | 0 | 17:9.0.0-10.el9_5 |
| AlmaLinux:9 | qemu-kvm-device-display-virtio-gpu | 0 | 17:9.0.0-10.el9_5 |
| AlmaLinux:9 | qemu-kvm-device-display-virtio-gpu-ccw | 0 | 17:9.0.0-10.el9_5 |
| AlmaLinux:9 | qemu-kvm-device-display-virtio-gpu-pci | 0 | 17:9.0.0-10.el9_5 |
| AlmaLinux:9 | qemu-kvm-device-display-virtio-vga | 0 | 17:9.0.0-10.el9_5 |
| AlmaLinux:9 | qemu-kvm-device-usb-host | 0 | 17:9.0.0-10.el9_5 |
| AlmaLinux:9 | qemu-kvm-device-usb-redirect | 0 | 17:9.0.0-10.el9_5 |
| AlmaLinux:9 | qemu-kvm-docs | 0 | 17:9.0.0-10.el9_5 |
| AlmaLinux:9 | qemu-kvm-tools | 0 | 17:9.0.0-10.el9_5 |
| AlmaLinux:9 | qemu-kvm-ui-egl-headless | 0 | 17:9.0.0-10.el9_5 |
| AlmaLinux:9 | qemu-kvm-ui-opengl | 0 | 17:9.0.0-10.el9_5 |
| AlmaLinux:9 | qemu-pr-helper | 0 | 17:9.0.0-10.el9_5 |
| Debian:11 | qemu | 0 | No fix |
| Debian:12 | qemu | 0 | 1:7.2+dfsg-7+deb12u6 |
| Debian:13 | qemu | 0 | 1:8.2.3+ds-1 |
| Mageia:9 | qemu | 0 | 7.2.15-1.mga9 |
| Red Hat:enterprise_linux:8::appstream | SLOF | 0 | 0:20210217-2.module+el8.10.0+20141+6faa2812 |
| Red Hat:enterprise_linux:8::appstream | hivex | 0 | 0:1.3.18-23.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | hivex-debuginfo | 0 | 0:1.3.18-23.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | hivex-debugsource | 0 | 0:1.3.18-23.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | hivex-devel | 0 | 0:1.3.18-23.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | libguestfs | 0 | 1:1.44.0-9.module+el8.9.0+18724+20190c23 |
| Red Hat:enterprise_linux:8::appstream | libguestfs-appliance | 0 | 1:1.44.0-9.module+el8.9.0+18724+20190c23 |
Related vulnerabilities
- CVE-2024-7383 A flaw was found in libnbd. Also affects SLOF
- CVE-2024-7409 A flaw was found in the QEMU NBD Server. Also affects SLOF
- CVE-2024-4467 A flaw was found in the QEMU disk image utility (qemu-img) 'info' command. Also affects SLOF
- CVE-2024-4418 A race condition leading to a stack use-after-free flaw was found in libvirt. Also affects SLOF
- CVE-2023-1018 An out-of-bounds read vulnerability exists in TPM2.0's Module Library allowing a 2-byte… Also affects SLOF
- CVE-2019-11135 TSX Asynchronous Abort condition on some CPUs utilizing speculative execution may allow… Also affects libiscsi
- CVE-2024-26327 An issue was discovered in QEMU 7.1.0 through 8.2.1. Also affects qemu-guest-agent
- CVE-2023-3019 A DMA reentrancy issue leading to a use-after-free error was found in the e1000e NIC… Also affects qemu-guest-agent