medium5.5
CVE-2024-8354
A flaw was found in QEMU.
Impact
A flaw was found in QEMU. An assertion failure was present in the usb_ep_get() function in hw/net/core.c when trying to get the USB endpoint from a USB device. This flaw may allow a malicious unprivileged guest user to crash the QEMU process on the host and cause a denial of service condition.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Qemu | Qemu | All versions |
| Redhat | Enterprise Linux | Versions 6.0, 7.0, 8.0, 9.0 |