high8.2
CVE-2024-3446
A double free vulnerability was found in QEMU virtio devices (virtio-gpu, virtio-serial-bus, virtio-crypto), where the mem_reentrancy_guard flag insufficiently…
Impact
A double free vulnerability was found in QEMU virtio devices (virtio-gpu, virtio-serial-bus, virtio-crypto), where the mem_reentrancy_guard flag insufficiently protects against DMA reentrancy issues. This issue could allow a malicious privileged guest user to crash the QEMU process on the host, resulting in a denial of service or allow arbitrary code execution within the context of the QEMU process on the host.
Affected packages
This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.
Weakness classification
References
- NVD record
- CVE.org record
- https://access.redhat.com/errata/RHSA-2024:6964
- https://access.redhat.com/security/cve/CVE-2024-3446
- https://bugzilla.redhat.com/show_bug.cgi?id=2274211
- https://patchew.org/QEMU/20240409105537.18308-1-philmd@linaro.org/
- https://access.redhat.com/security/cve/CVE-2024-3446
- https://bugzilla.redhat.com/show_bug.cgi?id=2274211
- https://patchew.org/QEMU/20240409105537.18308-1-philmd@linaro.org/
- https://security.netapp.com/advisory/ntap-20250502-0007/