CVE-2024-6519

Medium

Published: —Translated: 06/07/2026(UTC)NVD NIST

Summary

A use-after-free vulnerability was found in the QEMU LSI53C895A SCSI Host Bus Adapter emulation. This issue can lead to a crash or VM escape.

Risk Assessment

An attacker could exploit this vulnerability to crash the guest system or gain access to the host, posing a serious risk to the isolation of virtualized environments.

Recommendation

Immediately update QEMU to a version containing the fix for CVE-2024-6519. If an update is not possible, consider disabling the LSI53C895A controller emulation.

Original NVD description (English source)

A use-after-free vulnerability was found in the QEMU LSI53C895A SCSI Host Bus Adapter emulation. This issue can lead to a crash or VM escape.