Api.Msrc.Microsoft

Multiple CVEs Affecting Qemu's virtio-net Component

First seen 18 Feb 2026, 11:17 UTC • Api.Msrc.Microsoft

•41.1

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

Two vulnerabilities have been reported in Qemu's virtio-net component. CVE-2023-6693 involves a stack buffer overflow in the virtio_net_flush_tx() function, while CVE-2024-6505 addresses a queue index issue. Both vulnerabilities could potentially impact systems utilizing Qemu virtualization technology.

How this analysis works

Timeline

2024-01-02

CVE-2023-6693 published

2024-07-05

CVE-2024-6505 published

2026-02-18

Information published about both CVEs

Attack Flow

8 entities, 14 inferred relationships (STIX 2.1).

Technique (1)

Data Breach

Vulnerability (4)

CVE-2023-6693
CVE-2024-4467
CVE-2024-6505
CVE-2024-8612

Affected Platform (2)

QEMU
Qemu-kvm

Tool (1)

Qemu-img

Relationships

Qemu-img exploits CVE-2023-6693
Qemu-img exploits CVE-2024-4467
Qemu-img exploits CVE-2024-6505
Qemu-img exploits CVE-2024-8612
CVE-2023-6693 targets QEMU
CVE-2023-6693 targets Qemu-kvm
CVE-2024-4467 targets QEMU
CVE-2024-4467 targets Qemu-kvm
CVE-2024-6505 targets QEMU
CVE-2024-6505 targets Qemu-kvm
CVE-2024-8612 targets QEMU
CVE-2024-8612 targets Qemu-kvm
Data Breach targets QEMU
Data Breach targets Qemu-kvm

Continue Reading

Critical Januscape Vulnerability in Linux KVM Exposes Cloud Servers to Attacks Critical QEMU Vulnerabilities Affect Ubuntu Systems Critical Privilege Escalation Vulnerabilities in Canonical LXD Discovered Critical Denial of Service Vulnerabilities in SUSE Linux QEMU DesckVB RAT Campaign Exploits Google DoubleClick for Malspam Delivery Powercat Malware Campaign Targets Gamers with Infostealer Disguised as Cheats

Multiple CVEs Affecting Qemu's virtio-net Component

Article Content

Timeline

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading