CVE-2024-8612
Qemu-kvm: information leak in virtio devices
Reported by redhat · Published September 20, 2024
A flaw was found in QEMU, in the virtio-scsi, virtio-blk, and virtio-crypto devices. The size for virtqueue_push as set in virtio_scsi_complete_req / virtio_blk_req_complete / virito_crypto_req_complete could be larger than the true size of the data which has been sent to guest. Once virtqueue_push() finally calls dma_memory_unmap to ummap the in_iov, it may call the address_space_write function to write back the data. Some uninitialized data may exist in the bounce.buffer, leading to an information leak.
Risk scores
Affected products
| Vendor | Product | Versions |
|---|---|---|
| 637b0aa139565cb82a7b9269e62214f87082635c | ||
| Red Hat | Red Hat Enterprise Linux 10 | |
| Red Hat | Red Hat Enterprise Linux 6 | |
| Red Hat | Red Hat Enterprise Linux 7 | |
| Red Hat | Red Hat Enterprise Linux 7 | |
| Red Hat | Red Hat Enterprise Linux 8 | |
| Red Hat | Red Hat Enterprise Linux 8 Advanced Virtualization | |
| Red Hat | Red Hat Enterprise Linux 9 | |
| Red Hat | Red Hat Enterprise Linux 9 | |
| Red Hat | Red Hat Enterprise Linux 8 | |
| Red Hat | Red Hat Enterprise Linux 8 Advanced Virtualization | |
| 637b0aa139565cb82a7b9269e62214f87082635c | ||
| Red Hat | Red Hat Enterprise Linux 7 | |
| Red Hat | Red Hat Enterprise Linux 7 | |
| Red Hat | Red Hat Enterprise Linux 10 | |
| Red Hat | Red Hat Enterprise Linux 6 |
Timeline
- Sep 20, 2024 CVE Published
- Sep 21, 2024 EPSS Score (30 in total, the first dated here)
- Oct 5, 2024 Coalition ESS Score (11 in total, the first dated here)
- Nov 8, 2025 CVE Updated
- Jun 2, 2026 Security Advisory (6 in total, the first dated here)
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln CVE-2024-8612
vulnetix vdb fixes CVE-2024-8612Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/CVE-2024-8612/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- vdb-entryx_refsource_REDHAT
- RHBZ#2313760 issue-trackingx_refsource_REDHAT
- https://security.netapp.com/advisory/ntap-20241108-0006/ url