CVE-2024-42134

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A vulnerability has been resolved in the Linux kernel related to the virtio-pci module. The issue involves the vp dev->is avq function being empty in certain installations, specifically when virtio pci legacy does not assign a value to it. This emptiness can cause the guest system to crash when the virsh Attach device command is used. The vulnerability is related to the vp del vqs function in the virtio pci common.c file, where vp dev->is avq is used to determine whether it is an admin virtqueue.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.