REDHAT-BUG-2423549
A flaw was found in the virtio-crypto device of QEMU. The symmetric path enforces a length limit using conf.max_size, but the AKCIPHER path does not impose any bound. This could allow a malicious guest to trigger a memory exhaustion condition, potentially resulting in a denial of service (DoS) by aborting the QEMU process on the host. Upstream patch: https://lore.kernel.org/qemu-devel/20251221024321.143196-1-zhenwei.pi@linux.dev/
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2423549?
The severity of REDHAT-BUG-2423549 is categorized as a denial of service (DoS) vulnerability.
How does REDHAT-BUG-2423549 affect QEMU users?
REDHAT-BUG-2423549 can allow a malicious guest to trigger a memory exhaustion condition in QEMU.
How do I fix REDHAT-BUG-2423549?
To fix REDHAT-BUG-2423549, ensure you are running the latest patched version of QEMU provided by your distribution.
What component of QEMU is impacted by REDHAT-BUG-2423549?
The virtio-crypto device in QEMU is impacted by the vulnerability described in REDHAT-BUG-2423549.
Can REDHAT-BUG-2423549 be exploited remotely?
Yes, REDHAT-BUG-2423549 can be exploited by a malicious guest in a virtualized environment.