CVE-2021-3608

Name of the Vulnerable Software and Affected Versions QEMU versions prior to 6.1.0

Description The issue is related to a flaw in the QEMU implementation of VMWare's paravirtual RDMA device, which may result in a crash of QEMU or cause undefined behavior due to the access of an uninitialized pointer. This could allow an attacker to cause a denial of service.

Recommendations For versions prior to 6.1.0, update to version 6.1.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the paravirtual RDMA device to minimize the risk of exploitation.