---
id: CVE-2024-8612
title: 'Qemu-kvm: information leak in virtio devices'
summary: >-
  A flaw was found in QEMU, in the virtio-scsi, virtio-blk, and virtio-crypto
  devices. The size for virtqueue_push as set in virtio_scsi_complete_req /
  virtio_blk_req_complete / virito_crypto_req_complete could be larger than the
  true size…
severity: low
cvss: 3.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N'
cvssSource: cna
cwe:
  - CWE-200
vendor: Red Hat
product: qemu
affected:
  - qemu
  - qemu-kvm (all versions)
  - qemu-kvm
  - qemu-kvm
  - qemu-kvm-ma
  - 'virt:rhel/qemu-kvm (all versions)'
  - 'virt:av/qemu-kvm (all versions)'
  - qemu-kvm (all versions)
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2024-09-20T18:00:38.633928Z'
published: '2024-09-20'
updated: '2026-11-06'
sourceUpdated: '2026-11-06T14:57:34.834Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2024-8612'
references:
  - url: 'https://access.redhat.com/security/cve/CVE-2024-8612'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2313760'
    label: RHBZ#2313760
  - url: >-
      https://gitlab.com/qemu-project/qemu/-/commit/637b0aa139565cb82a7b9269e62214f87082635c
tags:
  - cve.org
epss: 0.00204
epssPercentile: 0.10464
ingestedAt: '2026-11-06T15:54:04.091Z'
---

## Overview

A flaw was found in QEMU, in the virtio-scsi, virtio-blk, and virtio-crypto devices. The size for virtqueue_push as set in virtio_scsi_complete_req / virtio_blk_req_complete / virito_crypto_req_complete could be larger than the true size of the data which has been sent to guest. Once virtqueue_push() finally calls dma_memory_unmap to ummap the in_iov, it may call the address_space_write function to write back the data. Some uninitialized data may exist in the bounce.buffer, leading to an information leak.

## Affected

- `qemu`
- `qemu-kvm (all versions)`
- `qemu-kvm`
- `qemu-kvm`
- `qemu-kvm-ma`
- `virt:rhel/qemu-kvm (all versions)`
- `virt:av/qemu-kvm (all versions)`
- `qemu-kvm (all versions)`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.