A flaw was found in QEMU, in the virtio-scsi, virtio-blk, and virtio-crypto devices. The size for virtqueue_push as set in virtio_scsi_complete_req / virtio_blk_req_complete / virito_crypto_req_complete could be larger than the true size of the data which has been sent to guest. Once virtqueue_push() finally calls dma_memory_unmap to ummap the in_iov, it may call the address_space_write function to write back the data. Some uninitialized data may exist in the bounce.buffer, leading to an information leak.
CVSS Details
- CVSS 3.1 Base Score: 3.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | No solution exists | May 15, 2025 | Sep 20, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 20, 2024 |
| Suse | — | Upgrade qemu-audio-jackUpgrade qemu-audio-pipewireUpgrade qemu-extraUpgrade qemu-vgabiosUpgrade qemu-microvmUpgrade qemu-guest-agentUpgrade qemu-slofUpgrade qemu-audio-alsaUpgrade qemu-headlessUpgrade qemu-langUpgrade qemu-ipxeUpgrade qemu-vhost-user-gpuUpgrade qemu-pr-helperUpgrade qemu-ui-gtkUpgrade qemu-block-rbdUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-sgabiosUpgrade qemu-block-sshUpgrade qemu-hw-usb-smartcardUpgrade qemu-accel-qtestUpgrade qemu-ui-spice-coreUpgrade qemu-ui-dbusUpgrade qemu-s390xUpgrade qemu-toolsUpgrade qemu-chardev-baumUpgrade qemu-chardev-spiceUpgrade qemu-audio-spiceUpgrade qemu-vmsr-helperUpgrade qemu-kvmUpgrade qemu-audio-dbusUpgrade qemu-block-curlUpgrade qemu-imgUpgrade qemu-block-nfsUpgrade qemu-linux-userUpgrade qemu-ksmUpgrade qemuUpgrade qemu-x86Upgrade qemu-spiceUpgrade qemu-ui-cursesUpgrade qemu-block-glusterUpgrade qemu-audio-paUpgrade qemu-seabiosUpgrade qemu-skibootUpgrade qemu-block-iscsiUpgrade qemu-hw-usb-hostUpgrade qemu-audio-ossUpgrade qemu-ppcUpgrade qemu-hw-display-qxlUpgrade qemu-ui-openglUpgrade qemu-ui-spice-appUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-docUpgrade qemu-block-dmgUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-ivshmem-toolsUpgrade qemu-hw-usb-redirectUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-armUpgrade qemu-accel-tcg-x86 | Dec 31, 2024 | Sep 20, 2024 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Sep 20, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub