Qemu: denial of service via improper synchronization in qemu nbd server during socket closure
Priority MEDIUM 41CWE-662Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- Partial Red Hat: 10 fixed, 4 without a fix
Attack profile from CVSS 3.0 · CNA. Fix status from CNA and Red Hat.
Summary
A flaw was found in the QEMU NBD Server. This vulnerability allows a denial of service (DoS) attack via improper synchronization during socket closure when a client keeps a socket open as the server is taken offline.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.01027 63rd percentileScored 2026-11-07
Fix Partial qemu: 7.2.0, 8.2.0, 9.0.0Red Hat: 11 advisoriesRed Hat: 10 fixed, 4 without a fix
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- Yes
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | qemu | — | 7.2.0, 8.2.0, 9.0.0 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8 | — | 8100020240905091210.489197e6 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 8 | — | 8100020240905091210.489197e6 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 9 | — | 17:9.0.0-10.el9_5 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 9.2 Extended Update Support | — | 17:7.2.0-14.el9_2.14 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 9.4 Extended Update Support | — | 17:8.2.0-11.el9_4.8 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.13 | — | 413.92.202411212100-0 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.13 | — | 413.92.202409180051-0 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.14 | — | 414.92.202411130444-0 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.15 | — | 415.92.202409162258-0 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.15 | — | 415.92.202411050056-0 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.16 | — | 416.94.202411261619-0 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4.17 | — | 417.94.202411261220-0 | Patch available | CNA |
| Red Hat | Red Hat Enterprise Linux 10 | — | — | Not affected | CNA |
| Red Hat | Red Hat Enterprise Linux 6 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux 7 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux 7 | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux 8 Advanced Virtualization | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux 8 Advanced Virtualization | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux 8 Advanced Virtualization | — | — | No fix listed | CNA |
| Red Hat | Red Hat Enterprise Linux 8 Advanced Virtualization | — | — | No fix listed | CNA |
| Red Hat | Red Hat OpenShift Container Platform 4 | — | — | No fix listed | CNA |
- qemu Vendor— Affected — Fixed in 7.2.0, 8.2.0, 9.0.0 Patch available CNA
- Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in 8100020240905091210.489197e6 Patch available CNA
- Red Hat Enterprise Linux 8 VendorRed Hat Affected — Fixed in 8100020240905091210.489197e6 Patch available CNA
- Red Hat Enterprise Linux 9 VendorRed Hat Affected — Fixed in 17:9.0.0-10.el9_5 Patch available CNA
- Red Hat Enterprise Linux 9.2 Extended Update Support VendorRed Hat Affected — Fixed in 17:7.2.0-14.el9_2.14 Patch available CNA
- Red Hat Enterprise Linux 9.4 Extended Update Support VendorRed Hat Affected — Fixed in 17:8.2.0-11.el9_4.8 Patch available CNA
- Red Hat OpenShift Container Platform 4.13 VendorRed Hat Affected — Fixed in 413.92.202411212100-0 Patch available CNA
- Red Hat OpenShift Container Platform 4.13 VendorRed Hat Affected — Fixed in 413.92.202409180051-0 Patch available CNA
- Red Hat OpenShift Container Platform 4.14 VendorRed Hat Affected — Fixed in 414.92.202411130444-0 Patch available CNA
- Red Hat OpenShift Container Platform 4.15 VendorRed Hat Affected — Fixed in 415.92.202409162258-0 Patch available CNA
- Red Hat OpenShift Container Platform 4.15 VendorRed Hat Affected — Fixed in 415.92.202411050056-0 Patch available CNA
- Red Hat OpenShift Container Platform 4.16 VendorRed Hat Affected — Fixed in 416.94.202411261619-0 Patch available CNA
- Red Hat OpenShift Container Platform 4.17 VendorRed Hat Affected — Fixed in 417.94.202411261220-0 Patch available CNA
- Red Hat Enterprise Linux 10 VendorRed Hat Affected — Fixed in — Not affected CNA
- Red Hat Enterprise Linux 6 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux 7 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux 7 VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux 8 Advanced Virtualization VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux 8 Advanced Virtualization VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux 8 Advanced Virtualization VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat Enterprise Linux 8 Advanced Virtualization VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat OpenShift Container Platform 4 VendorRed Hat Affected — Fixed in — No fix listed CNA
CPE names CNA · 18
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:/a:redhat:enterprise_linux:8::appstream | 8 | — | Red Hat |
| cpe:/a:redhat:enterprise_linux:8::crb | 8 | — | Red Hat |
| cpe:/a:redhat:enterprise_linux:9::appstream | 9 | — | Red Hat |
| cpe:/a:redhat:rhel_eus:9.2::appstream | 9.2 | — | Red Hat |
| cpe:/a:redhat:rhel_eus:9.4::appstream | 9.4 | — | Red Hat |
| cpe:/a:redhat:openshift:4.13::el8 | 4.13 | — | Red Hat |
| cpe:/a:redhat:openshift:4.13::el9 | 4.13 | — | Red Hat |
| cpe:/a:redhat:openshift:4.14::el8 | 4.14 | — | Red Hat |
| cpe:/a:redhat:openshift:4.14::el9 | 4.14 | — | Red Hat |
| cpe:/a:redhat:openshift:4.15::el8 | 4.15 | — | Red Hat |
- cpe:/a:redhat:enterprise_linux:8::appstream Versions 8 — ·Red Hat
- cpe:/a:redhat:enterprise_linux:8::crb Versions 8 — ·Red Hat
- cpe:/a:redhat:enterprise_linux:9::appstream Versions 9 — ·Red Hat
- cpe:/a:redhat:rhel_eus:9.2::appstream Versions 9.2 — ·Red Hat
- cpe:/a:redhat:rhel_eus:9.4::appstream Versions 9.4 — ·Red Hat
- cpe:/a:redhat:openshift:4.13::el8 Versions 4.13 — ·Red Hat
- cpe:/a:redhat:openshift:4.13::el9 Versions 4.13 — ·Red Hat
- cpe:/a:redhat:openshift:4.14::el8 Versions 4.14 — ·Red Hat
- cpe:/a:redhat:openshift:4.14::el9 Versions 4.14 — ·Red Hat
- cpe:/a:redhat:openshift:4.15::el8 Versions 4.15 — ·Red Hat
Show 8 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:/a:redhat:openshift:4.15::el9 | 4.15 | — | Red Hat |
| cpe:/a:redhat:openshift:4.16::el9 | 4.16 | — | Red Hat |
| cpe:/a:redhat:openshift:4.17::el9 | 4.17 | — | Red Hat |
| cpe:/a:redhat:enterprise_linux:10 | 10 | — | Red Hat |
| cpe:/o:redhat:rhel_els:6 | 6 | — | Red Hat |
| cpe:/o:redhat:rhel_els:7 | 7 | — | Red Hat |
| cpe:/a:redhat:advanced_virtualization:8::el8 | 8 | — | Red Hat |
| cpe:/a:redhat:openshift:4 | 4 | — | Red Hat |
- cpe:/a:redhat:openshift:4.15::el9 Versions 4.15 — ·Red Hat
- cpe:/a:redhat:openshift:4.16::el9 Versions 4.16 — ·Red Hat
- cpe:/a:redhat:openshift:4.17::el9 Versions 4.17 — ·Red Hat
- cpe:/a:redhat:enterprise_linux:10 Versions 10 — ·Red Hat
- cpe:/o:redhat:rhel_els:6 Versions 6 — ·Red Hat
- cpe:/o:redhat:rhel_els:7 Versions 7 — ·Red Hat
- cpe:/a:redhat:advanced_virtualization:8::el8 Versions 8 — ·Red Hat
- cpe:/a:redhat:openshift:4 Versions 4 — ·Red Hat
Remediation
- Fix · CNA qemu Fixed in 7.2.0, 8.2.0, 9.0.0
Red Hat 11 advisories
- RHSA-2024:10813 Released 2024-12-12 · Red Hat rating ImportantOpenShift Container Platform 4.13.54 bug fix and security update
- Red Hat OpenShift Container Platform 4.13 openshift4/ose-agent-installer-csr-approver-rhel8, openshift4/ose-cluster-samples-operator, openshift4/ose-console +1
- RHSA-2024:10528 Released 2024-12-04 · Red Hat rating ImportantOpenShift Container Platform 4.16.25 bug fix and security update
- Red Hat OpenShift Container Platform 4.16 rhcos
- RHSA-2024:10518 Released 2024-12-03 · Red Hat rating ImportantOpenShift Container Platform 4.17.7 bug fix and security update
- Red Hat OpenShift Container Platform 4.17 openshift4/ose-ibmcloud-machine-controllers-rhel9, openshift4/ose-monitoring-plugin-rhel9, openshift4/ose-networking-console-plugin-rhel9 +1
Show 8 more Red Hat advisories
- RHSA-2024:9620 Released 2024-11-20 · Red Hat rating ImportantOpenShift Container Platform 4.14.41 bug fix and security update
- Red Hat OpenShift Container Platform 4.14 openshift4/ose-console, openshift4/ose-monitoring-plugin-rhel8, rhcos
- RHSA-2024:9912 Released 2024-11-19 · Red Hat rating Moderateqemu-kvm security update
- Red Hat Enterprise Linux AppStream EUS (v.9.4) qemu-guest-agent-17:8.2.0-11.el9_4.8, qemu-img-17:8.2.0-11.el9_4.8, qemu-kvm-17:8.2.0-11.el9_4.8 +17
- RHSA-2024:8991 Released 2024-11-13 · Red Hat rating ImportantOpenShift Container Platform 4.15.38 bug fix and security update
- Red Hat OpenShift Container Platform 4.15 openshift4/ose-agent-installer-api-server-rhel8, openshift4/ose-console, openshift4/ose-monitoring-plugin-rhel8 +1
- RHSA-2024:9136 Released 2024-11-12 · Red Hat rating Moderateqemu-kvm security update
- Red Hat Enterprise Linux AppStream (v. 9) qemu-guest-agent-17:9.0.0-10.el9_5, qemu-img-17:9.0.0-10.el9_5, qemu-kvm-17:9.0.0-10.el9_5 +17
- RHSA-2024:7408 Released 2024-10-01 · Red Hat rating Moderateqemu-kvm security update
- Red Hat Enterprise Linux AppStream EUS (v.9.2) qemu-guest-agent-17:7.2.0-14.el9_2.14, qemu-img-17:7.2.0-14.el9_2.14, qemu-kvm-17:7.2.0-14.el9_2.14 +16
- RHSA-2024:6818 Released 2024-09-25 · Red Hat rating ModerateOpenShift Container Platform 4.15.34 bug fix and security update
- Red Hat OpenShift Container Platform 4.15 openshift4/network-tools-rhel8, openshift4/ose-agent-installer-api-server-rhel8, openshift4/ose-agent-installer-node-agent-rhel9 +26
- RHSA-2024:6811 Released 2024-09-25 · Red Hat rating ImportantOpenShift Container Platform 4.13.51 bug fix and security update
- Red Hat OpenShift Container Platform 4.13 openshift4/ose-cluster-openshift-controller-manager-operator, openshift4/ose-hypershift-rhel8, openshift4/ose-openshift-apiserver-rhel8 +1
- RHSA-2024:6964 Released 2024-09-24 · Red Hat rating Moderatevirt:rhel and virt-devel:rhel security update
- Red Hat Enterprise Linux AppStream (v. 8) SLOF-20210217-2.module+el8.10.0+20141+6faa2812.noarch::virt:rhel, SLOF-20210217-2.module+el8.10.0+20141+6faa2812.src::virt:rhel, hivex-1.3.18-23.module+el8.9.0+18724+20190c23.aarch64::virt:rhel +47
- Red Hat Enterprise Linux CRB (v. 8) SLOF-20210217-2.module+el8.10.0+20141+6faa2812.src::virt-devel:rhel, hivex-1.3.18-23.module+el8.9.0+18724+20190c23.i686::virt-devel:rhel, hivex-devel-1.3.18-23.module+el8.9.0+18724+20190c23.i686::virt-devel:rhel +47
Vendor assessments
Red Hat
Red Hat rating: Moderate. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Enterprise Linux 6 | Affected | No fix planned: Out of support scope |
| Red Hat Enterprise Linux 7 | Affected | No fix planned: Out of support scope |
| Red Hat Enterprise Linux 8 Advanced Virtualization | Affected | No fix planned: Will not fix |
| Red Hat OpenShift Container Platform 4 | Affected | No fix planned: Will not fix |
| Red Hat Enterprise Linux AppStream (v. 8) | Fixed | RHSA-2024:6964 |
| Red Hat Enterprise Linux AppStream (v. 9) | Fixed | RHSA-2024:9136 |
| Red Hat Enterprise Linux AppStream EUS (v.9.2) | Fixed | RHSA-2024:7408 |
| Red Hat Enterprise Linux AppStream EUS (v.9.4) | Fixed | RHSA-2024:9912 |
| Red Hat Enterprise Linux CRB (v. 8) | Fixed | RHSA-2024:6964 |
| Red Hat OpenShift Container Platform 4.13 | Fixed | RHSA-2024:10813, RHSA-2024:6811 |
| Red Hat OpenShift Container Platform 4.14 | Fixed | RHSA-2024:9620 |
| Red Hat OpenShift Container Platform 4.15 | Fixed | RHSA-2024:6818, RHSA-2024:8991 |
| Red Hat OpenShift Container Platform 4.16 | Fixed | RHSA-2024:10528 |
| Red Hat OpenShift Container Platform 4.17 | Fixed | RHSA-2024:10518 |
Not affected: 6 products
- Red Hat Enterprise Linux 10
- Red Hat OpenShift Container Platform 4.13
- Red Hat OpenShift Container Platform 4.14
- Red Hat OpenShift Container Platform 4.15
- Red Hat OpenShift Container Platform 4.16
- Red Hat OpenShift Container Platform 4.17
Timeline
- 2026-10-02 Threatist record created from CVE-2024-7409
- 2026-10-03 Alias added: GHSA-7c7g-wccp-rrhj
- 2026-10-09 Fix available: openshift/[email protected], openshift/[email protected], openshift/[email protected] +4 · CNA
References
More Red Hat vulnerabilities
- TI-2019-15875 Protection mechanism failure in Jenkins Pipeline: Groovy Plugin KEVCVSS 3.1CRITICAL 9.9
- TI-2019-15874 Protection mechanism failure in Jenkins Script Security Plugin KEVCVSS 3.1CRITICAL 9.9
- TI-2019-08259 Underflow in PHP-FPM can lead to RCE KEVCVSS 3.1CRITICAL 9.8
- TI-2019-05363 Code injection in Elastic Kibana KEVCVSS 3.1CRITICAL 10.0
- TI-2019-03949 Out-of-bounds write in ESXi and Horizon DaaS KEVCVSS 3.1CRITICAL 9.8
- TI-2018-16080 A code execution vulnerability exists in the Stapler web framework used by Jenkins 2.153… KEVCVSS 3.1CRITICAL 9.8
Sources
- CVE-2024-7409 · CVE Program
- CVE-2024-7409 · NVD
- FIRST EPSS
- GHSA-7c7g-wccp-rrhj · GitHub Advisory Database · CC BY 4.0
- CVE-2024-7409 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences