CVE-2024-8612

LOW

INFO Priority: 0.01 BB Relevance: 33/100

Published: 2024-09-20 Modified: 2026-11-06 First seen: 2026-11-06 Status: active

Attack Surface

Low Complexity No Interaction Scope Change

CVSS Vector Breakdown

AV: Local

AC: Low

PR: Low

UI: None

S: Changed

C: Low

I: None

A: None

Description

A flaw was found in QEMU, in the virtio-scsi, virtio-blk, and virtio-crypto devices. The size for virtqueue_push as set in virtio_scsi_complete_req / virtio_blk_req_complete / virito_crypto_req_complete could be larger than the true size of the data which has been sent to guest. Once virtqueue_push() finally calls dma_memory_unmap to ummap the in_iov, it may call the address_space_write function to write back the data. Some uninitialized data may exist in the bounce.buffer, leading to an information leak.