CVE-2024-3446

Qemu: virtio: dma reentrancy issue leads to double free vulnerability

State: Published
Severity: 8.2 High
Published: Apr 9, 2024
Updated: May 2, 2025
Reserved: Apr 8, 2024

Description

A double free vulnerability was found in QEMU virtio devices (virtio-gpu, virtio-serial-bus, virtio-crypto), where the mem_reentrancy_guard flag insufficiently protects against DMA reentrancy issues. This issue could allow a malicious privileged guest user to crash the QEMU process on the host, resulting in a denial of service or allow arbitrary code execution within the context of the QEMU process on the host.

Scores

CVSS	Score	Vector	Source
3.1	8.2 High	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H	redhat

Weaknesses

CWE-415 Double Free

Affected Products

Product	Versions
Red Hat Enterprise Linux 8Red Hat	8100020240905091210.489197e6 and laterNot affected
Red Hat Enterprise Linux 8Red Hat	8100020240905091210.489197e6 and laterNot affected
Red Hat Enterprise Linux 6Red Hat
Red Hat Enterprise Linux 7Red Hat
Red Hat Enterprise Linux 7Red Hat
Red Hat Enterprise Linux 8 Advanced VirtualizationRed Hat
Red Hat Enterprise Linux 9Red Hat

References

RHSA-2024:6964vendor-advisory
https://access.redhat.com/security/cve/CVE-2024-3446vdb-entry
RHBZ#2274211issue-tracking
https://patchew.org/QEMU/20240409105537.18308-1-philmd@linaro.org/
https://security.netapp.com/advisory/ntap-20250502-0007/

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.