A flaw was found in QEMU, in the virtio-scsi, virtio-blk, and virtio-crypto devices. The size for virtqueue_push as set in virtio_scsi_complete_req / virtio_blk_req_complete / virito_crypto_req_complete could be larger than the true size of the data which has been sent to guest. Once virtqueue_push() finally calls dma_memory_unmap to ummap the in_iov, it may call the address_space_write function to write back the data. Some uninitialized data may exist in the bounce.buffer, leading to an information leak.
CVSS Details
- CVSS 3.1 Base Score: 3.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | No solution exists | May 15, 2025 | Sep 20, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 20, 2024 |
| Suse | — | Upgrade qemu-audio-alsaUpgrade qemu-accel-qtestUpgrade qemu-block-sshUpgrade qemu-s390xUpgrade qemu-extraUpgrade qemu-ui-dbusUpgrade qemu-ui-spice-coreUpgrade qemu-block-rbdUpgrade qemu-toolsUpgrade qemu-vhost-user-gpuUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-kvmUpgrade qemu-audio-dbusUpgrade qemu-chardev-spiceUpgrade qemu-ui-gtkUpgrade qemu-imgUpgrade qemu-ipxeUpgrade qemu-chardev-baumUpgrade qemu-langUpgrade qemu-block-nfsUpgrade qemu-hw-usb-smartcardUpgrade qemu-microvmUpgrade qemu-audio-jackUpgrade qemu-audio-pipewireUpgrade qemu-vmsr-helperUpgrade qemu-guest-agentUpgrade qemu-block-curlUpgrade qemu-vgabiosUpgrade qemu-headlessUpgrade qemu-pr-helperUpgrade qemu-audio-spiceUpgrade qemu-sgabiosUpgrade qemu-slofUpgrade qemu-x86Upgrade qemu-spiceUpgrade qemu-hw-usb-hostUpgrade qemu-block-iscsiUpgrade qemu-audio-ossUpgrade qemu-armUpgrade qemu-accel-tcg-x86Upgrade qemu-hw-display-virtio-vgaUpgrade qemu-seabiosUpgrade qemu-block-glusterUpgrade qemu-audio-paUpgrade qemu-block-dmgUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-docUpgrade qemuUpgrade qemu-skibootUpgrade qemu-linux-userUpgrade qemu-ivshmem-toolsUpgrade qemu-hw-usb-redirectUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-ksmUpgrade qemu-ppcUpgrade qemu-ui-openglUpgrade qemu-hw-display-qxlUpgrade qemu-ui-spice-appUpgrade qemu-ui-curses | Dec 31, 2024 | Sep 20, 2024 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Sep 20, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub