{"id":"CVE-2024-6505","title":"Qemu-kvm: virtio-net: queue index out-of-bounds access in software rss","summary":"A flaw was found in the virtio-net device in QEMU. When enabling the RSS feature on the virtio-net network card, the indirections_table data within RSS becomes controllable. Setting excessively large values may cause an index out-of-boun…","severity":"medium","cvss":6.8,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H","cvssSource":"cna","cwe":["CWE-125"],"vendor":"Red Hat","product":"qemu","affected":["qemu >= 5.1.0 < 9.1.0","qemu-kvm (all versions)","qemu-kvm","qemu-kvm","qemu-kvm-ma","virt:rhel/qemu-kvm (all versions)","virt:av/qemu-kvm (all versions)","qemu-kvm (all versions)"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2024-07-13T20:15:08.315330Z"},"published":"2024-07-05","updated":"2026-11-06","sourceUpdated":"2026-11-06T22:43:17.386Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2024-6505","references":[{"url":"https://access.redhat.com/security/cve/CVE-2024-6505"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2295760","label":"RHBZ#2295760"}],"tags":["cve.org"],"epss":0.00656,"epssPercentile":0.51584,"ingestedAt":"2026-11-06T23:05:46.621Z","slug":"CVE-2024-6505","body":"## Overview\n\nA flaw was found in the virtio-net device in QEMU. When enabling the RSS feature on the virtio-net network card, the indirections_table data within RSS becomes controllable. Setting excessively large values may cause an index out-of-bounds issue, potentially resulting in heap overflow access. This flaw allows a privileged user in the guest to crash the QEMU process on the host.\n\n## Affected\n\n- `qemu >= 5.1.0 < 9.1.0`\n- `qemu-kvm (all versions)`\n- `qemu-kvm`\n- `qemu-kvm`\n- `qemu-kvm-ma`\n- `virt:rhel/qemu-kvm (all versions)`\n- `virt:av/qemu-kvm (all versions)`\n- `qemu-kvm (all versions)`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.\n\n### Workarounds\n\nA viable mitigation for this vulnerability is to disable RSS on the nic/virtio driver. \nThis can be performed either with the following qemu-kvm command \"-device virtio-net-pci,rss=off\", or, alternatively, by directly modifying the KVM XML file to disable RSS using a standard configuration tool (ex. libvirt).","depth":"sunlit","depthScore":38,"depthScoreParts":{"impact":37.4,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}