QEMU LSI53C895A SCSI UAF Local Privilege Escalation (CVE-2024-6519)

From this webpage screenshot, the following key information about the vulnerability can be obtained: 1. Vulnerability ID: CVE-2024-6519 2. Vulnerability Description: A use-after-free local privilege escalation vulnerability exists in the QEMU LSI53C895A SCSI Host Bus Adapter emulation. This vulnerability may lead to accessing memory after it has been freed, potentially causing crashes or virtual machine escape. 3. Report Date: June 12, 2024 4. Reporter: Robb Gatica 5. Status: NEW (New) 6. Priority: High 7. Severity: High 8. Affected Component: vulnerability 9. Affected Version: Not specified 10. Affected Operating System: Linux 11. Affected Hardware: All hardware 12. Affected Platform: Not specified 13. Affected Software: Not specified 14. Affected Software Version: Not specified 15. Affected Software Component: Not specified 16. Affected Software Package: Not specified 17. Affected Software Library: Not specified 18. Affected Software Framework: Not specified 19. Affected Software Platform: Not specified 20. Affected Software Environment: Not specified 21. Affected Software Configuration: Not specified 22. Affected Software Deployment: Not specified 23. Affected Software Deployment Environment: Not specified 24. Affected Software Deployment Platform: Not specified 25. Affected Software Deployment Configuration: Not specified 26. Affected Software Deployment Environment: Not specified 27. Affected Software Deployment Platform: Not specified 28. Affected Software Deployment Configuration: Not specified 29. Affected Software Deployment Environment: Not specified 30. Affected Software Deployment Platform: Not specified 31. Affected Software Deployment Configuration: Not specified 32. Affected Software Deployment Environment: Not specified 33. Affected Software Deployment Platform: Not specified 34. Affected Software Deployment Configuration: Not specified 35. Affected Software Deployment Environment: Not specified 36. Affected Software Deployment Platform: Not specified 37. Affected Software Deployment Configuration: Not specified 38. Affected Software Deployment Environment: Not specified 39. Affected Software Deployment Platform: Not specified 40. Affected Software Deployment Configuration: Not specified 41. Affected Software Deployment Environment: Not specified 42. Affected Software Deployment Platform: Not specified 43. Affected Software Deployment Configuration: Not specified 44. Affected Software Deployment Environment: Not specified 45. Affected Software Deployment Platform: Not specified 46. Affected Software Deployment Configuration: Not specified 47. Affected Software Deployment Environment: Not specified 48. Affected Software Deployment Platform: Not specified 49. Affected Software Deployment Configuration: Not specified 50. Affected Software Deployment Environment: Not specified 51. Affected Software Deployment Platform: Not specified 52. Affected Software Deployment Configuration: Not specified 53. Affected Software Deployment Environment: Not specified 54. Affected Software Deployment Platform: Not specified 55. Affected Software Deployment Configuration: Not specified 56. Affected Software Deployment Environment: Not specified 57. Affected Software Deployment Platform: Not specified 58. Affected Software Deployment Configuration: Not specified 59. Affected Software Deployment Environment: Not specified 60. Affected Software Deployment Platform: Not specified 61. Affected Software Deployment Configuration: Not specified 62. Affected Software Deployment Environment: Not specified 63. Affected Software Deployment Platform: Not specified 64. Affected Software Deployment Configuration: Not specified 65. Affected Software Deployment Environment: Not specified 66. Affected Software Deployment Platform: Not specified 67. Affected Software Deployment Configuration: Not specified 68. Affected Software Deployment Environment: Not specified 69. Affected Software Deployment Platform: Not specified 70. Affected Software Deployment Configuration: Not specified 71. Affected Software Deployment Environment: Not specified 72. Affected Software Deployment Platform: Not specified 73. Affected Software Deployment Configuration: Not specified 74. Affected Software Deployment Environment: Not specified 75. Affected Software Deployment Platform: Not specified 76. Affected Software Deployment Configuration: Not specified 77. Affected Software Deployment Environment: Not specified 78. Affected Software Deployment Platform: Not specified 79. Affected Software Deployment Configuration: Not specified 80. Affected Software Deployment Environment: Not specified 81. Affected Software Deployment Platform: Not specified 82. Affected Software Deployment Configuration: Not specified 83. Affected Software Deployment Environment: Not specified 84. Affected Software Deployment Platform: Not specified 85. Affected Software Deployment Configuration: Not specified 86. Affected Software Deployment Environment: Not specified 87. Affected

Goal Reached Thanks to every supporter — we hit 100%!

QEMU LSI53C895A SCSI UAF Local Privilege Escalation (CVE-2024-6519)