SB2024012618 - Privilege escalation in QEMU

Description

This security bulletin contains information about 1 vulnerability.

1) Improper synchronization (CVE-ID: CVE-2023-5088)

CWE-ID: CWE-662 - Improper Synchronization

CVSSv4: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to improper synchronization, which causes guest I/O operation otherwise addressed to an arbitrary disk offset to be targeted to offset 0 instead. An L2 guest with a virtual disk (vdiskL2) stored on a virtual disk of an L1 (vdiskL1) hypervisor can read and/or write data to LBA 0 of vdiskL1, potentially gaining control of L1 at its next reboot.

Remediation

Install update from vendor's website.

References

• https://bugzilla.redhat.com/show_bug.cgi?id=2247283
• https://access.redhat.com/security/cve/CVE-2023-5088
• https://lore.kernel.org/all/20230921160712.99521-1-simon.rowe@nutanix.com/T/
• https://security.netapp.com/advisory/ntap-20231208-0005/