What’s Vulnerable › Vulnerabilities
CVE-2024-7409: Qemu: denial of service via improper synchronization in qemu nbd server during socket closure
- Severity: high (CVSS 7.5 v3.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.0% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2024-08-05 · updated 2026-10-09
- Weakness: CWE-662
Description
A flaw was found in the QEMU NBD Server. This vulnerability allows a denial of service (DoS) attack via improper synchronization during socket closure when a client keeps a socket open as the server is taken offline.
Affected products
- Red Hat OpenShift Container Platform 4.18: all versions
- Red Hat Enterprise Linux 8: all versions — fixed in 8100020240905091210.489197e6
- Red Hat Enterprise Linux 8 Advanced Virtualization: all versions
- Red Hat Enterprise Linux 9: all versions — fixed in 17:9.0.0-10.el9_5
- Red Hat Enterprise Linux 9.2 Extended Update Support: all versions — fixed in 17:7.2.0-14.el9_2.14
- Red Hat Enterprise Linux 9.4 Extended Update Support: all versions — fixed in 17:8.2.0-11.el9_4.8
- Red Hat OpenShift Container Platform 4.13: all versions — fixed in 413.92.202409180051-0, 413.92.202411212100-0
- Red Hat OpenShift Container Platform 4.14: all versions — fixed in 414.92.202411130444-0
- Red Hat OpenShift Container Platform 4.15: all versions — fixed in 415.92.202409162258-0, 415.92.202411050056-0
- Red Hat OpenShift Container Platform 4.16: all versions — fixed in 416.94.202411261619-0
- Red Hat OpenShift Container Platform 4.17: all versions — fixed in 417.94.202411261220-0
How to fix
Upgrade to a fixed version: Red Hat Enterprise Linux 8 8100020240905091210.489197e6; Red Hat Enterprise Linux 9 17:9.0.0-10.el9_5; Red Hat Enterprise Linux 9.2 Extended Update Support 17:7.2.0-14.el9_2.14; Red Hat Enterprise Linux 9.4 Extended Update Support 17:8.2.0-11.el9_4.8; Red Hat OpenShift Container Platform 4.13 413.92.202409180051-0, 413.92.202411212100-0; Red Hat OpenShift Container Platform 4.14 414.92.202411130444-0; Red Hat OpenShift Container Platform 4.15 415.92.202409162258-0, 415.92.202411050056-0; Red Hat OpenShift Container Platform 4.16 416.94.202411261619-0; Red Hat OpenShift Container Platform 4.17 417.94.202411261220-0. Check the vendor advisory for mitigations.
References
- https://access.redhat.com/errata/RHSA-2024:10518
- https://access.redhat.com/errata/RHSA-2024:10528
- https://access.redhat.com/errata/RHSA-2024:10813
- https://access.redhat.com/errata/RHSA-2024:6811
- https://access.redhat.com/errata/RHSA-2024:6818
- https://access.redhat.com/errata/RHSA-2024:6964
- https://access.redhat.com/errata/RHSA-2024:7408
- https://access.redhat.com/errata/RHSA-2024:8991
- https://access.redhat.com/errata/RHSA-2024:9136
- https://access.redhat.com/errata/RHSA-2024:9620
- https://access.redhat.com/errata/RHSA-2024:9912
- https://access.redhat.com/security/cve/CVE-2024-7409
Get alerted when CVE-2024-7409 or the next vulnerability affects your stack