---
id: CVE-2024-6505
title: 'Qemu-kvm: virtio-net: queue index out-of-bounds access in software rss'
summary: >-
  A flaw was found in the virtio-net device in QEMU. When enabling the RSS
  feature on the virtio-net network card, the indirections_table data within RSS
  becomes controllable. Setting excessively large values may cause an index
  out-of-boun…
severity: medium
cvss: 6.8
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H'
cvssSource: cna
cwe:
  - CWE-125
vendor: Red Hat
product: qemu
affected:
  - qemu >= 5.1.0 < 9.1.0
  - qemu-kvm (all versions)
  - qemu-kvm
  - qemu-kvm
  - qemu-kvm-ma
  - 'virt:rhel/qemu-kvm (all versions)'
  - 'virt:av/qemu-kvm (all versions)'
  - qemu-kvm (all versions)
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2024-07-13T20:15:08.315330Z'
published: '2024-07-05'
updated: '2026-11-06'
sourceUpdated: '2026-11-06T22:43:17.386Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2024-6505'
references:
  - url: 'https://access.redhat.com/security/cve/CVE-2024-6505'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2295760'
    label: RHBZ#2295760
tags:
  - cve.org
epss: 0.00656
epssPercentile: 0.51584
ingestedAt: '2026-11-06T23:05:46.621Z'
---

## Overview

A flaw was found in the virtio-net device in QEMU. When enabling the RSS feature on the virtio-net network card, the indirections_table data within RSS becomes controllable. Setting excessively large values may cause an index out-of-bounds issue, potentially resulting in heap overflow access. This flaw allows a privileged user in the guest to crash the QEMU process on the host.

## Affected

- `qemu >= 5.1.0 < 9.1.0`
- `qemu-kvm (all versions)`
- `qemu-kvm`
- `qemu-kvm`
- `qemu-kvm-ma`
- `virt:rhel/qemu-kvm (all versions)`
- `virt:av/qemu-kvm (all versions)`
- `qemu-kvm (all versions)`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

### Workarounds

A viable mitigation for this vulnerability is to disable RSS on the nic/virtio driver. 
This can be performed either with the following qemu-kvm command "-device virtio-net-pci,rss=off", or, alternatively, by directly modifying the KVM XML file to disable RSS using a standard configuration tool (ex. libvirt).