CVE-2023-3301

Summary

CVE-2023-3301: A race condition vulnerability was discovered in QEMU, an open-source virtual machine emulator. This issue arises from the asynchronous nature of hot-unplugging, which allows a net device backend to be cleared before the virtio-net PCI frontend has been properly unplugged. A malicious guest operating system could exploit this time window to trigger an assertion and induce a denial-of-service condition.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.