CVE-2024-7409

Description

A flaw was found in the QEMU NBD Server. This vulnerability allows a denial of service (DoS) attack via improper synchronization during socket closure when a client keeps a socket open as the server is taken offline.

CVSS Metrics

• v3.0•HIGH•Score: 7.5CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS Trends

Current EPSS score: 1.03%• Percentile: 62%

Techniques & Countermeasures

• CWE-662•Improper Synchronization

  The product utilizes multiple threads, processes, components, or systems to allow temporary access to a shared resource that can only be exclusive to one process at a time, but it does not properly synchronize these actions, which might cause simultaneous accesses of this resource by multiple threads or processes.

Affected Systems

• debian•qemu

  < 1:5.2+dfsg-11+deb11u5 | < 1:7.2+dfsg-7+deb12u8 | < 1:9.0.2+ds-3 | < 1:9.0.2+ds-3

• redhat•qemu-guest-agent

  < 17:7.2.0-14.el9_2.14 | < 17:8.2.0-11.el9_4.8

• redhat•qemu-guest-agent-debuginfo

  < 17:7.2.0-14.el9_2.14 | < 17:8.2.0-11.el9_4.8

• redhat•qemu-img

  < 17:7.2.0-14.el9_2.14 | < 17:8.2.0-11.el9_4.8

• redhat•qemu-img-debuginfo

  < 17:7.2.0-14.el9_2.14 | < 17:8.2.0-11.el9_4.8

• redhat•qemu-kvm

  < 17:7.2.0-14.el9_2.14 | < 17:8.2.0-11.el9_4.8

• redhat•qemu-kvm-audio-dbus-debuginfo

  < 17:8.2.0-11.el9_4.8

• redhat•qemu-kvm-audio-pa

  < 17:7.2.0-14.el9_2.14 | < 17:8.2.0-11.el9_4.8

• redhat•qemu-kvm-audio-pa-debuginfo

  < 17:7.2.0-14.el9_2.14 | < 17:8.2.0-11.el9_4.8

• redhat•qemu-kvm-block-blkio

  < 17:8.2.0-11.el9_4.8

• redhat•qemu-kvm-block-blkio-debuginfo

  < 17:8.2.0-11.el9_4.8

• redhat•qemu-kvm-block-curl

  < 17:7.2.0-14.el9_2.14 | < 17:8.2.0-11.el9_4.8

• redhat•qemu-kvm-block-curl-debuginfo

  < 17:7.2.0-14.el9_2.14 | < 17:8.2.0-11.el9_4.8

• redhat•qemu-kvm-block-rbd

  < 17:7.2.0-14.el9_2.14 | < 17:8.2.0-11.el9_4.8

• redhat•qemu-kvm-block-rbd-debuginfo

  < 17:7.2.0-14.el9_2.14 | < 17:8.2.0-11.el9_4.8

• redhat•qemu-kvm-common

  < 17:7.2.0-14.el9_2.14 | < 17:8.2.0-11.el9_4.8

• redhat•qemu-kvm-common-debuginfo

  < 17:7.2.0-14.el9_2.14 | < 17:8.2.0-11.el9_4.8

• redhat•qemu-kvm-core

  < 17:7.2.0-14.el9_2.14 | < 17:8.2.0-11.el9_4.8

• redhat•qemu-kvm-core-debuginfo

  < 17:7.2.0-14.el9_2.14 | < 17:8.2.0-11.el9_4.8

• redhat•qemu-kvm-debuginfo

  < 17:7.2.0-14.el9_2.14 | < 17:8.2.0-11.el9_4.8

• redhat•qemu-kvm-debugsource

  < 17:7.2.0-14.el9_2.14 | < 17:8.2.0-11.el9_4.8

• redhat•qemu-kvm-device-display-virtio-gpu

  < 17:7.2.0-14.el9_2.14 | < 17:8.2.0-11.el9_4.8

• redhat•qemu-kvm-device-display-virtio-gpu-ccw

  < 17:7.2.0-14.el9_2.14 | < 17:8.2.0-11.el9_4.8

• redhat•qemu-kvm-device-display-virtio-gpu-ccw-debuginfo

  < 17:7.2.0-14.el9_2.14 | < 17:8.2.0-11.el9_4.8

• redhat•qemu-kvm-device-display-virtio-gpu-debuginfo

  < 17:7.2.0-14.el9_2.14 | < 17:8.2.0-11.el9_4.8

• redhat•qemu-kvm-device-display-virtio-gpu-pci

  < 17:7.2.0-14.el9_2.14 | < 17:8.2.0-11.el9_4.8

• redhat•qemu-kvm-device-display-virtio-gpu-pci-debuginfo

  < 17:7.2.0-14.el9_2.14 | < 17:8.2.0-11.el9_4.8

• redhat•qemu-kvm-device-display-virtio-vga

  < 17:7.2.0-14.el9_2.14 | < 17:8.2.0-11.el9_4.8

• redhat•qemu-kvm-device-display-virtio-vga-debuginfo

  < 17:7.2.0-14.el9_2.14 | < 17:8.2.0-11.el9_4.8

• redhat•qemu-kvm-device-usb-host

  < 17:7.2.0-14.el9_2.14 | < 17:8.2.0-11.el9_4.8

• redhat•qemu-kvm-device-usb-host-debuginfo

  < 17:7.2.0-14.el9_2.14 | < 17:8.2.0-11.el9_4.8

• redhat•qemu-kvm-device-usb-redirect

  < 17:7.2.0-14.el9_2.14 | < 17:8.2.0-11.el9_4.8

• redhat•qemu-kvm-device-usb-redirect-debuginfo

  < 17:7.2.0-14.el9_2.14 | < 17:8.2.0-11.el9_4.8

• redhat•qemu-kvm-docs

  < 17:7.2.0-14.el9_2.14 | < 17:8.2.0-11.el9_4.8

• redhat•qemu-kvm-tests-debuginfo

  < 17:7.2.0-14.el9_2.14 | < 17:8.2.0-11.el9_4.8

• redhat•qemu-kvm-tools

  < 17:7.2.0-14.el9_2.14 | < 17:8.2.0-11.el9_4.8

• redhat•qemu-kvm-tools-debuginfo

  < 17:7.2.0-14.el9_2.14 | < 17:8.2.0-11.el9_4.8

• redhat•qemu-kvm-ui-dbus-debuginfo

  < 17:8.2.0-11.el9_4.8

• redhat•qemu-kvm-ui-egl-headless

  < 17:7.2.0-14.el9_2.14 | < 17:8.2.0-11.el9_4.8

• redhat•qemu-kvm-ui-egl-headless-debuginfo

  < 17:7.2.0-14.el9_2.14 | < 17:8.2.0-11.el9_4.8

• redhat•qemu-kvm-ui-opengl

  < 17:7.2.0-14.el9_2.14 | < 17:8.2.0-11.el9_4.8

• redhat•qemu-kvm-ui-opengl-debuginfo

  < 17:7.2.0-14.el9_2.14 | < 17:8.2.0-11.el9_4.8

• redhat•qemu-pr-helper

  < 17:7.2.0-14.el9_2.14 | < 17:8.2.0-11.el9_4.8

• redhat•qemu-pr-helper-debuginfo

  < 17:7.2.0-14.el9_2.14 | < 17:8.2.0-11.el9_4.8

References (22)

• https://access.redhat.com/errata/RHSA-2024:10518
• https://access.redhat.com/errata/RHSA-2024:10528
• https://access.redhat.com/errata/RHSA-2024:10813
• https://access.redhat.com/errata/RHSA-2024:6811
• https://access.redhat.com/errata/RHSA-2024:6818
• https://access.redhat.com/errata/RHSA-2024:6964
• https://access.redhat.com/errata/RHSA-2024:7408
• https://access.redhat.com/errata/RHSA-2024:8991
• https://access.redhat.com/errata/RHSA-2024:9136
• https://access.redhat.com/errata/RHSA-2024:9620
• https://access.redhat.com/errata/RHSA-2024:9912
• https://access.redhat.com/security/cve/CVE-2024-7409
• https://bugzilla.redhat.com/show_bug.cgi?id=2302487
• https://security.netapp.com/advisory/ntap-20250502-0008/
• https://lists.debian.org/debian-lts-announce/2025/09/msg00011.html
• https://security-tracker.debian.org/tracker/CVE-2024-7409
• https://access.redhat.com/security/updates/classification/#moderate
• https://issues.redhat.com/browse/RHEL-54641
• https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_7408.json
• https://www.cve.org/CVERecord?id=CVE-2024-7409
• https://nvd.nist.gov/vuln/detail/CVE-2024-7409
• https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_9912.json