CVE-2025-11234: Qemu-kvm: vnc websocket handshake use-after-free
A flaw was found in QEMU. If the QIOChannelWebsock object is freed while it is waiting to complete a handshake, a GSource is leaked. This can lead to the callback firing later on and triggering a use-after-free in the use of the channel. This can be abused by a malicious client with network access to the VNC WebSocket port to cause a denial of service during the WebSocket handshake prior to the VNC client authentication.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-11234?
CVE-2025-11234 has a moderate severity level due to the potential for a use-after-free vulnerability in QEMU.
How do I fix CVE-2025-11234?
To fix CVE-2025-11234, update your QEMU installation to the latest version that includes the patch addressing this vulnerability.
Who is affected by CVE-2025-11234?
Users of QEMU versions prior to the patch release that addresses CVE-2025-11234 are vulnerable.
What is the nature of the vulnerability in CVE-2025-11234?
CVE-2025-11234 involves a flaw where the QIOChannelWebsock object can lead to a use-after-free condition if freed prematurely.
Can CVE-2025-11234 be exploited remotely?
Yes, a malicious client could exploit CVE-2025-11234 to trigger the use-after-free condition, potentially compromising the system.