Import Source
https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-60919.json
JSON Data
https://api.test.osv.dev/v1/vulns/AZL-60919
Upstream
Published
2024-05-14T15:44:26Z
Modified
2026-04-01T05:19:40.874434Z
Summary
CVE-2024-4693 affecting package qemu for versions less than 8.2.0-16
Details

A flaw was found in the QEMU Virtio PCI Bindings (hw/virtio/virtio-pci.c). An improper release and use of the irqfd for vector 0 during the boot process leads to a guest triggerable crash via vhostnetstop(). This flaw allows a malicious guest to crash the QEMU process on the host.

References

Affected packages

Azure Linux:3 / qemu

Package

Name
qemu
Purl
pkg:rpm/azure-linux/qemu

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
8.2.0-16

Database specific

source
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-60919.json"