p PatchFirst

CVE-2025-11234

CVE-2025-11234 · Qemu-kvm: vnc websocket handshake use-after-free

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

A flaw was found in QEMU. If the QIOChannelWebsock object is freed while it is waiting to complete a handshake, a GSource is leaked. This can lead to the callback firing later on and triggering a use-after-free in the use of the channel. This can be abused by a malicious client with network access to the VNC WebSocket port to cause a denial of service during the WebSocket handshake prior to the VNC client authentication.

CVSS 7.5 · High · EPSS 0.9% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • red hat enterprise linux 10

    Versions
    • ≥ 18:10.0.0-14.el10_1.5: Not affected (rpm)

    No fix published

  • red hat enterprise linux 8

    Versions
    • ≥ 8100020251120003312.489197e6: Not affected (rpm)

    No fix published

  • red hat enterprise linux 8

    Versions
    • ≥ 8100020251202222937.489197e6: Not affected (rpm)

    No fix published

  • red hat enterprise linux 8.4 advanced mission critical update support

    Versions
    • ≥ 8040020260916092751.522a0ee4: Not affected (rpm)

    No fix published

  • red hat enterprise linux 8.4 extended update support long-life add-on

    Versions
    • ≥ 8040020260916092751.522a0ee4: Not affected (rpm)

    No fix published

  • red hat enterprise linux 8.8 telecommunications update service

    Versions
    • ≥ 8080020260910092120.63b34585: Not affected (rpm)

    No fix published

  • red hat enterprise linux 8.8 update services for sap solutions

    Versions
    • ≥ 8080020260910092120.63b34585: Not affected (rpm)

    No fix published

  • red hat enterprise linux 9

    Versions
    • ≥ 17:10.1.0-17.el9_8: Not affected (rpm)

    No fix published

  • red hat enterprise linux 9.0 update services for sap solutions

    Versions
    • ≥ 17:6.2.0-11.el9_0.10: Not affected (rpm)

    No fix published

  • red hat enterprise linux 9.2 update services for sap solutions

    Versions
    • ≥ 17:7.2.0-14.el9_2.24: Not affected (rpm)

    No fix published

  • red hat enterprise linux 9.4 extended update support

    Versions
    • ≥ 17:8.2.0-11.el9_4.18: Not affected (rpm)

    No fix published

  • red hat enterprise linux 9.4 extended update support

    Versions
    • ≥ 17:8.2.0-11.el9_4.19: Not affected (rpm)

    No fix published

  • red hat openshift container platform 4.12

    Versions
    • ≥ 412.86.202608241157-0: Not affected (rpm)

    No fix published

  • red hat openshift container platform 4.16

    Versions
    • ≥ 416.94.202601071926-0: Not affected (rpm)

    No fix published

  • red hat openshift container platform 4.17

    Versions
    • ≥ 417.94.202601120213-0: Not affected (rpm)

    No fix published

  • red hat openshift container platform 4.18

    Versions
    • ≥ 418.94.202601071817-0: Not affected (rpm)

    No fix published

  • red hat enterprise linux 6

    No fix published

  • red hat enterprise linux 7

    No fix published

  • red hat enterprise linux 7

    No fix published

  • qemu Debian:12

    Versions
    • 1:7.2+dfsg-7
    • 1:7.2+dfsg-7+deb12u1
    • 1:7.2+dfsg-7+deb12u10
    • 1:7.2+dfsg-7+deb12u11
    • 1:7.2+dfsg-7+deb12u12
    • 1:7.2+dfsg-7+deb12u13
    • 1:7.2+dfsg-7+deb12u14
    • 1:7.2+dfsg-7+deb12u15
    • 1:7.2+dfsg-7+deb12u16
    • 1:7.2+dfsg-7+deb12u17
    • 1:7.2+dfsg-7+deb12u2
    • 1:7.2+dfsg-7+deb12u2~bpo11+1
    • 1:7.2+dfsg-7+deb12u3
    • 1:7.2+dfsg-7+deb12u4
    • 1:7.2+dfsg-7+deb12u5
    • 1:7.2+dfsg-7+deb12u6
    • 1:7.2+dfsg-7+deb12u7
    • 1:7.2+dfsg-7+deb12u8
    • 1:7.2+dfsg-7+deb12u9
    Affected ranges
    • ECOSYSTEM: < 1:7.2+dfsg-7+deb12u18

    Update to 1:7.2+dfsg-7+deb12u18

  • qemu Debian:13

    Versions
    • 1:10.0.2+ds-2
    • 1:10.0.2+ds-2+deb13u1
    • 1:10.0.2+ds-2+deb13u1~bpo12+1
    • 1:10.0.3+ds-0+deb13u1
    • 1:10.0.3+ds-1
    • 1:10.0.3+ds-2
    • 1:10.0.3+ds-3
    • 1:10.0.3+ds-4
    • 1:10.0.6+ds-0+deb13u1
    • 1:10.0.6+ds-0+deb13u2
    Affected ranges
    • ECOSYSTEM: < 1:10.0.7+ds-0+deb13u1

    Update to 1:10.0.7+ds-0+deb13u1

  • qemu Debian:14

    Versions
    • 1:10.0.2+ds-2
    • 1:10.0.3+ds-1
    • 1:10.0.3+ds-2
    • 1:10.0.3+ds-3
    • 1:10.0.3+ds-4
    • 1:10.1.0+ds-1
    • 1:10.1.0+ds-2
    • 1:10.1.0+ds-3
    • 1:10.1.0+ds-4
    • 1:10.1.0+ds-5
    • 1:10.1.0~rc0+ds-1
    • 1:10.1.0~rc0+ds-2
    • 1:10.1.0~rc0+ds-3
    • 1:10.1.0~rc0+ds-4
    • 1:10.1.0~rc1+ds-1
    • 1:10.1.0~rc1+ds-1a
    • 1:10.1.0~rc1+ds-1b
    • 1:10.1.0~rc1+ds-2
    • 1:10.1.0~rc1+ds-3
    • 1:10.1.0~rc2+ds-1
    • 1:10.1.0~rc3+ds-1
    • 1:10.1.0~rc3+ds-2
    • 1:10.1.1+ds-1
    • 1:10.1.2+ds-1
    • 1:10.1.2+ds-2
    • 1:10.1.2+ds-3
    Affected ranges
    • ECOSYSTEM: < 1:10.1.3+ds-1

    Update to 1:10.1.3+ds-1

  • qemu Ubuntu:Pro:18.04:LTS

    Versions
    • 1:2.10+dfsg-0ubuntu3
    • 1:2.10+dfsg-0ubuntu4
    • 1:2.10+dfsg-0ubuntu5
    • 1:2.11+dfsg-1ubuntu1
    • 1:2.11+dfsg-1ubuntu2
    • 1:2.11+dfsg-1ubuntu4
    • 1:2.11+dfsg-1ubuntu5
    • 1:2.11+dfsg-1ubuntu6
    • 1:2.11+dfsg-1ubuntu7
    • 1:2.11+dfsg-1ubuntu7.1
    • 1:2.11+dfsg-1ubuntu7.2
    • 1:2.11+dfsg-1ubuntu7.3
    • 1:2.11+dfsg-1ubuntu7.4
    • 1:2.11+dfsg-1ubuntu7.5
    • 1:2.11+dfsg-1ubuntu7.6
    • 1:2.11+dfsg-1ubuntu7.7
    • 1:2.11+dfsg-1ubuntu7.8
    • 1:2.11+dfsg-1ubuntu7.9
    • 1:2.11+dfsg-1ubuntu7.10
    • 1:2.11+dfsg-1ubuntu7.12
    • 1:2.11+dfsg-1ubuntu7.13
    • 1:2.11+dfsg-1ubuntu7.14
    • 1:2.11+dfsg-1ubuntu7.15
    • 1:2.11+dfsg-1ubuntu7.17
    • 1:2.11+dfsg-1ubuntu7.18
    • 1:2.11+dfsg-1ubuntu7.19
    • 1:2.11+dfsg-1ubuntu7.20
    • 1:2.11+dfsg-1ubuntu7.21
    • 1:2.11+dfsg-1ubuntu7.22
    • 1:2.11+dfsg-1ubuntu7.23
    • 1:2.11+dfsg-1ubuntu7.25
    • 1:2.11+dfsg-1ubuntu7.26
    • 1:2.11+dfsg-1ubuntu7.27
    • 1:2.11+dfsg-1ubuntu7.28
    • 1:2.11+dfsg-1ubuntu7.29
    • 1:2.11+dfsg-1ubuntu7.31
    • 1:2.11+dfsg-1ubuntu7.32
    • 1:2.11+dfsg-1ubuntu7.33
    • 1:2.11+dfsg-1ubuntu7.34
    • 1:2.11+dfsg-1ubuntu7.35
    • 1:2.11+dfsg-1ubuntu7.36
    • 1:2.11+dfsg-1ubuntu7.37
    • 1:2.11+dfsg-1ubuntu7.38
    • 1:2.11+dfsg-1ubuntu7.39
    • 1:2.11+dfsg-1ubuntu7.40
    • 1:2.11+dfsg-1ubuntu7.41
    • 1:2.11+dfsg-1ubuntu7.42
    • 1:2.11+dfsg-1ubuntu7.42+esm1
    • 1:2.11+dfsg-1ubuntu7.42+esm2
    Affected ranges
    • ECOSYSTEM: < 1:2.11+dfsg-1ubuntu7.42+esm5

    Update to 1:2.11+dfsg-1ubuntu7.42+esm5

  • qemu Ubuntu:Pro:20.04:LTS

    Versions
    • 1:4.0+dfsg-0ubuntu9
    • 1:4.0+dfsg-0ubuntu10
    • 1:4.2-1ubuntu1
    • 1:4.2-1ubuntu2
    • 1:4.2-3ubuntu1
    • 1:4.2-3ubuntu2
    • 1:4.2-3ubuntu3
    • 1:4.2-3ubuntu4
    • 1:4.2-3ubuntu5
    • 1:4.2-3ubuntu6
    • 1:4.2-3ubuntu6.1
    • 1:4.2-3ubuntu6.2
    • 1:4.2-3ubuntu6.3
    • 1:4.2-3ubuntu6.4
    • 1:4.2-3ubuntu6.5
    • 1:4.2-3ubuntu6.6
    • 1:4.2-3ubuntu6.7
    • 1:4.2-3ubuntu6.8
    • 1:4.2-3ubuntu6.9
    • 1:4.2-3ubuntu6.10
    • 1:4.2-3ubuntu6.11
    • 1:4.2-3ubuntu6.12
    • 1:4.2-3ubuntu6.14
    • 1:4.2-3ubuntu6.15
    • 1:4.2-3ubuntu6.16
    • 1:4.2-3ubuntu6.17
    • 1:4.2-3ubuntu6.18
    • 1:4.2-3ubuntu6.19
    • 1:4.2-3ubuntu6.21
    • 1:4.2-3ubuntu6.23
    • 1:4.2-3ubuntu6.24
    • 1:4.2-3ubuntu6.25
    • 1:4.2-3ubuntu6.26
    • 1:4.2-3ubuntu6.27
    • 1:4.2-3ubuntu6.28
    • 1:4.2-3ubuntu6.29
    • 1:4.2-3ubuntu6.30
    Affected ranges
    • ECOSYSTEM: < 1:4.2-3ubuntu6.30+esm1

    Update to 1:4.2-3ubuntu6.30+esm1

Original sources

Check your server →