CVE-2024-0340

2024-01-0900:00:00

ubuntu.com

cve-2024-0340

linux kernel

memory initialization

vhost_new_msg

guest operating system

privileged users

kernel memory contents

vhost-net device file

bugzilla

ubuntu

kvm group

5.1 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.2%

JSON

A vulnerability was found in vhost_new_msg in drivers/vhost/vhost.c in the
Linux kernel, which does not properly initialize memory in messages passed
between virtual guests and the host operating system in the
vhost/vhost.c:vhost_new_msg() function. This issue can allow local
privileged users to read some kernel memory contents when reading from the
/dev/vhost-net device file.

Bugs

Notes

Author	Note
	Priority reason: On Ubuntu, /dev/vhost-net access requires being in the kvm group (or root).

OSVersionArchitecturePackageVersionFilename
ubuntu20.04noarchlinux< 5.4.0-173.191UNKNOWN
ubuntu22.04noarchlinux< 5.15.0-100.110UNKNOWN
ubuntu20.04noarchlinux-aws< 5.4.0-1120.130UNKNOWN
ubuntu22.04noarchlinux-aws< 5.15.0-1056.61UNKNOWN
ubuntu20.04noarchlinux-aws-5.15< 5.15.0-1056.61~20.04.1UNKNOWN
ubuntu18.04noarchlinux-aws-5.4< 5.4.0-1120.130~18.04.1) Available with Ubuntu Pro or Ubuntu Pro (Infra-onlyUNKNOWN
ubuntu20.04noarchlinux-azure< 5.4.0-1126.133UNKNOWN
ubuntu22.04noarchlinux-azure< 5.15.0-1058.66UNKNOWN
ubuntu20.04noarchlinux-azure-5.15< 5.15.0-1058.66~20.04.2UNKNOWN
ubuntu18.04noarchlinux-azure-5.4< 5.4.0-1126.133~18.04.1) Available with Ubuntu Pro or Ubuntu Pro (Infra-onlyUNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	20.04	noarch	linux	< 5.4.0-173.191	UNKNOWN
ubuntu	22.04	noarch	linux	< 5.15.0-100.110	UNKNOWN
ubuntu	20.04	noarch	linux-aws	< 5.4.0-1120.130	UNKNOWN
ubuntu	22.04	noarch	linux-aws	< 5.15.0-1056.61	UNKNOWN
ubuntu	20.04	noarch	linux-aws-5.15	< 5.15.0-1056.61~20.04.1	UNKNOWN
ubuntu	18.04	noarch	linux-aws-5.4	< 5.4.0-1120.130~18.04.1) Available with Ubuntu Pro or Ubuntu Pro (Infra-only	UNKNOWN
ubuntu	20.04	noarch	linux-azure	< 5.4.0-1126.133	UNKNOWN
ubuntu	22.04	noarch	linux-azure	< 5.15.0-1058.66	UNKNOWN
ubuntu	20.04	noarch	linux-azure-5.15	< 5.15.0-1058.66~20.04.2	UNKNOWN
ubuntu	18.04	noarch	linux-azure-5.4	< 5.4.0-1126.133~18.04.1) Available with Ubuntu Pro or Ubuntu Pro (Infra-only	UNKNOWN