A flaw was found in QEMU, in the virtio-scsi, virtio-blk, and virtio-crypto devices. The size for virtqueue_push as set in virtio_scsi_complete_req / virtio_blk_req_complete / virito_crypto_req_complete could be larger than the true size of the data which has been sent to guest. Once virtqueue_push() finally calls dma_memory_unmap to ummap the in_iov, it may call the address_space_write function to write back the data. Some uninitialized data may exist in the bounce.buffer, leading to an information leak.
CVSS Details
- CVSS 3.1 Base Score: 3.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | No solution exists | May 15, 2025 | Sep 20, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 20, 2024 |
| Suse | — | Upgrade qemu-audio-spiceUpgrade qemu-block-curlUpgrade qemu-hw-usb-smartcardUpgrade qemu-block-rbdUpgrade qemu-ui-spice-coreUpgrade qemu-toolsUpgrade qemu-accel-qtestUpgrade qemu-s390xUpgrade qemu-audio-dbusUpgrade qemu-ui-dbusUpgrade qemu-microvmUpgrade qemu-langUpgrade qemu-chardev-baumUpgrade qemu-ipxeUpgrade qemu-vhost-user-gpuUpgrade qemu-pr-helperUpgrade qemu-sgabiosUpgrade qemu-imgUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-block-sshUpgrade qemu-ui-gtkUpgrade qemu-kvmUpgrade qemu-vmsr-helperUpgrade qemu-chardev-spiceUpgrade qemu-block-nfsUpgrade qemu-SLOFUpgrade qemu-extraUpgrade qemu-audio-jackUpgrade qemu-headlessUpgrade qemu-guest-agentUpgrade qemu-vgabiosUpgrade qemu-audio-pipewireUpgrade qemu-audio-alsaUpgrade qemu-seabiosUpgrade qemu-block-glusterUpgrade qemu-audio-paUpgrade qemu-accel-tcg-x86Upgrade qemu-hw-display-virtio-vgaUpgrade qemu-armUpgrade qemu-x86Upgrade qemu-block-dmgUpgrade qemuUpgrade qemu-linux-userUpgrade qemu-ksmUpgrade qemu-skibootUpgrade qemu-docUpgrade qemu-spiceUpgrade qemu-hw-usb-hostUpgrade qemu-ui-spice-appUpgrade qemu-block-iscsiUpgrade qemu-audio-ossUpgrade qemu-ui-cursesUpgrade qemu-ppcUpgrade qemu-ui-openglUpgrade qemu-hw-display-qxlUpgrade qemu-hw-usb-redirectUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-ivshmem-toolsUpgrade qemu-hw-display-virtio-gpu-pci | Dec 31, 2024 | Sep 20, 2024 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Sep 20, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub