Description
QEMU through 8.0.4 accesses a NULL pointer in nvme_directive_receive in hw/nvme/ctrl.c because there is no check for whether an endurance group is configured before checking whether Flexible Data Placement is enabled.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | qemu | 1:8.0.4+dfsg-2 | — |
| Debian 13 | qemu | 1:8.0.4+dfsg-2 | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 8 | hivex +4 | 1.3.18-23.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 |
| Oracle Linux 8 | libguestfs-winsupport | 8.6-1.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 |
| Oracle Linux 8 | libiscsi +2 | 1.18.0-8.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 |
| Oracle Linux 8 | libnbd +4 | 1.6.0-5.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 |
| Oracle Linux 8 | libtpms +1 | 0.9.1-0.20211126git1ff6fe1f43.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 |
| Oracle Linux 8 | libvirt +28 | 7.10.0-4.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 |
| Oracle Linux 8 | libvirt-dbus | 1.3.0-2.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 |
| Oracle Linux 8 | nbdkit +18 | 1.24.0-4.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 |
| Oracle Linux 8 | netcf +2 | 0.2.8-12.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 |
| Oracle Linux 8 | perl-Sys-Virt | 6.0.0-1.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 |
| Oracle Linux 8 | qemu-img +10 | 15:6.1.1-9.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 |
| Oracle Linux 8 | seabios +2 | 1.15.0-2.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 |
| Oracle Linux 8 | sgabios +1 | 1:0.20170427git-3.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 |
| Oracle Linux 8 | supermin +1 | 5.2.1-1.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 |
| Oracle Linux 8 | swtpm +4 | 0.7.0-3.20211109gitb79fd91.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 |
| Oracle Linux 8 | virt-dib +22 | 1:1.44.0-5.0.1.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 |
| Oracle Linux 8 | virt-v2v +3 | 1:1.42.0-19.0.1.module+el8.10.0+90374+95a91213 | ELSA-2024-12605 |
Advisories 2
- WID-SEC-2023-2059 QEMU: Schwachstelle ermöglicht Denial of Service BSI CERT-Bund (WID) · Sep 2, 2024
- ELSA-2024-12605 Important: virt:kvm_utils2 security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Sep 2, 2024