CVE-2024-6519

Publication date 21 October 2024

Last updated 16 December 2024


Ubuntu priority

A use-after-free vulnerability was found in the QEMU LSI53C895A SCSI Host Bus Adapter emulation. This issue can lead to a crash or VM escape.

Read the notes from the security team

Status

Package Ubuntu Release Status
qemu 24.10 oracular
Vulnerable, fix deferred
24.04 LTS noble
Vulnerable, fix deferred
22.04 LTS jammy
Vulnerable, fix deferred
20.04 LTS focal
Vulnerable, fix deferred
18.04 LTS bionic
Vulnerable, fix deferred
16.04 LTS xenial
Vulnerable, fix deferred
14.04 LTS trusty Ignored end of ESM support, was deferred [2024-12-16]

Notes


mdeslaur

as of 2024-12-16, there is no upstream fix for this issue