Logo
›
›vulnerability›CVE-2024-3446
Name
CVE-2024-3446
Source
NVD ( link)Debian ( link)
Description
A double free vulnerability was found in QEMU virtio devices (virtio-gpu, virtio-serial-bus, virtio-crypto), where the mem_reentrancy_guard flag insufficiently protects against DMA reentrancy issues. This issue could allow a malicious privileged guest user to crash the QEMU process on the host, resulting in a denial of service or allow arbitrary code execution within the context of the QEMU process on the host.
CWEs
CWE-415
Published Date
Updated Date
Workaround
-
Advisories

Analysis#

Affected Component
Analysis
qemu
Patched

Vulnerability Ratings#

8.2
CVSSv31
NaN
other

Others affected components#

Name
Project
Project Version
Version
Status
qemu
buildroot
2025.02.x
9.2.0
Not Affected
qemu
buildroot
master
11.0.0
Not Affected
qemu
openwrt
master
10.1.3-r2
Not Affected
qemu
openwrt
openwrt-25.12
10.1.2-r1
Not Affected
qemu
yocto
master
11.0.1
Not Affected
qemu
yocto
scarthgap
8.2.7
Not Affected

Resolved with patches#

qemu (yocto:kirkstone)

#
Title
Author
Resolve
1
hw: replace most qemu_bh_new calls with qemu_bh_new_guarded
Alexander Bulekov <alxndr@bu.edu>
CVE-2024-3446
2
virtio-gpu: Protect from DMA re-entrancy bugs
Philippe Mathieu-Daudé <philmd@linaro.org>
CVE-2024-3446
3
async: Add an optional reentrancy guard to the BH API
Alexander Bulekov <alxndr@bu.edu>
CVE-2024-3446
4
hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs
Philippe Mathieu-Daudé <philmd@linaro.org>
CVE-2024-3446
5
hw/virtio: Introduce virtio_bh_new_guarded() helper
Philippe Mathieu-Daudé <philmd@linaro.org>
CVE-2024-3446
6
hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs
Philippe Mathieu-Daudé <philmd@linaro.org>
CVE-2024-3446