← back
CVE-2024-6519

Qemu: scsi: lsi53c895a: use-after-free local privilege escalation vulnerability

CVSS 8.2 HIGHEPSS 0.3%CWE-416
A use-after-free vulnerability was found in the QEMU LSI53C895A SCSI Host Bus Adapter emulation. This issue can lead to a crash or VM escape.
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Affected products
qemuRed Hat · Red Hat Enterprise Linux 6Red Hat · Red Hat Enterprise Linux 7Red Hat · Red Hat Enterprise Linux 8Red Hat · Red Hat Enterprise Linux 8 Advanced VirtualizationRed Hat · Red Hat Enterprise Linux 9

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://access.redhat.com/security/cve/CVE-2024-6519https://bugzilla.redhat.com/show_bug.cgi?id=2292089https://www.zerodayinitiative.com/advisories/ZDI-24-1382/