A potential DoS issue was found in the virtio-fs shared file system daemon (virtiofsd) implementation of the QEMU. Virtiofsd is meant to share a host file system directory with a guest via virtio-fs device. The said DoS may occur on the host, if the guest was to open the maximum number of file descriptors under the shared directory. A guest user/process may use this flaw to cause DoS issue on the host. Upstream patch(es): ------------------- -> https://lists.gnu.org/archive/html/qemu-devel/2020-05/msg00143.html -> https://lists.gnu.org/archive/html/qemu-devel/2020-05/msg00141.html Reference: ---------- -> https://www.openwall.com/lists/oss-security/2020/05/04/1
Acknowledgments: Name: Yuval Avrahami (Palo Alto Networks)
Created qemu tracking bugs for this issue: Affects: fedora-rawhide [bug 1830842]