A flaw in QEMU’s virtio‑blk device allows a guest with high privileges to send a malformed SCSI request that bypasses input descriptor size validation. The resulting out‑of‑bounds write corrupts host heap memory and can crash the QEMU process. This crash renders the host unable to manage affected virtual machines, effectively causing a denial of service for services running on that host.

Affected products include Red Hat Enterprise Linux 6 through 10, Red Hat Enterprise Linux for NVIDIA 26, and Red Hat OpenShift Container Platform 4. The vulnerability resides in the QEMU component bundled with these distributions and any system running the virtio‑blk device in QEMU.

The CVSS score of 6.7 indicates moderate severity. EPSS data is unavailable and the vulnerability is not listed in the CISA KEV catalog, suggesting limited external exploitation. The attack requires a guest with high privileges, making the threat primarily internal or confined to trusted virtual environments. Nonetheless, the ability to crash QEMU can disrupt host services and compromise availability.