QEMU: Schwachstelle ermöglicht Denial of Service

Summary

Product

Vulnerabilities 1

• Medium 6.8
  CVE-2024-6505

  Qemu-kvm: virtio-net: queue index out-of-bounds access in software rss

  A flaw was found in the virtio-net device in QEMU. When enabling the RSS feature on the virtio-net network card, the indirections_table data within RSS becomes controllable. Setting excessively large values may cause an index out-of-bounds issue, potentially …

  Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Virtualization Debian Ubuntu Azure Linux Wolfi
  Jul 5, 2024

Revision history

1. 2026-01-08 #4

   Neue Updates von SUSE aufgenommen

2. 2026-01-06 #3

   Neue Updates von SUSE aufgenommen

3. 2025-09-11 #2

   Neue Updates von Ubuntu aufgenommen

4. 2024-07-04 #1

   Initiale Fassung

References

• Red Hat Bugzilla vom 2024-07-04
  https://bugzilla.redhat.com/show_bug.cgi?id=2295760
• Red Hat Bugzilla vom 2024-07-04
  https://access.redhat.com/security/cve/CVE-2024-6505
• Ubuntu Security Notice USN-7744-1 vom 2025-09-11
  https://ubuntu.com/security/notices/USN-7744-1
• SUSE Security Update SUSE-SU-2026:0039-1 vom 2026-01-06
  https://lists.suse.com/pipermail/sle-security-updates/2026-January/023690.html
• SUSE Security Update SUSE-SU-2026:0043-1 vom 2026-01-07
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LQIBK44LTWVYSXGTUA6TG6ZHSRDLSOFO/
• SUSE Security Update SUSE-SU-2026:0070-1 vom 2026-01-08
  https://lists.suse.com/pipermail/sle-security-updates/2026-January/023707.html