SUSE-SU-2024:3948-1
Not scored
Security update for qemu
This update for qemu fixes the following issues: - CVE-2024-8354: Fixed assertion failure in usb_ep_get() (bsc#1230834). - CVE-2024-8612: Fixed nformation leak in virtio devices (bsc#1230915). - CVE-2024-7409: Fixed denial of service via improper synchronization in QEMU NBD Server during socket closure (bsc#1229007).
Exploit probability
Not scored
Published
November 8, 2024
Required by
Not available
Last source change
February 4, 2026
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
Open Source Vulnerabilities
SUSE-SU-2024:3948-1
View original source
This update for qemu fixes the following issues: - CVE-2024-8354: Fixed assertion failure in usb_ep_get() (bsc#1230834). - CVE-2024-8612: Fixed nformation leak in virtio devices (bsc#1230915). - CVE-2024-7409: Fixed denial of service via improper synchronization in QEMU NBD Server during socket closure (bsc#1229007).
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1229007
- https://bugzilla.suse.com/1230834
- https://bugzilla.suse.com/1230915
- https://www.suse.com/security/cve/CVE-2024-7409
- https://www.suse.com/security/cve/CVE-2024-8354
- https://www.suse.com/security/cve/CVE-2024-8612
- https://www.suse.com/support/update/announcement/2024/suse-su-20243948-1/