An issue was discovered in QEMU 7.1.0 through 8.2.1. register_vfs in hw/pci/pcie_sriov.c mishandles the situation where a guest writes NumVFs greater than TotalVFs, leading to a buffer overflow in VF implementations.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade qemu-kvm-commonUpgrade qemu-kvmUpgrade qemu-kvm-ui-openglUpgrade qemu-kvm-block-blkioUpgrade qemu-kvm-device-display-virtio-gpu-pciUpgrade qemu-kvm-device-display-virtio-gpuUpgrade qemu-kvm-docsUpgrade qemu-kvm-block-rbdUpgrade qemu-kvm-block-curlUpgrade qemu-kvm-device-display-virtio-vgaUpgrade qemu-kvm-device-usb-hostUpgrade qemu-kvm-audio-paUpgrade qemu-pr-helperUpgrade qemu-kvm-toolsUpgrade qemu-guest-agentUpgrade qemu-kvm-coreUpgrade qemu-kvm-ui-egl-headlessUpgrade qemu-kvm-device-usb-redirectUpgrade qemu-imgUpgrade qemu-kvm-device-display-virtio-gpu-ccw | Nov 19, 2024 | Feb 19, 2024 |
| Debian | — | Upgrade qemu | Jul 30, 2024 | Feb 19, 2024 |
| Oracle_linux | — | Upgrade libvirt-lock-sanlockUpgrade qemu-kvm-device-display-virtio-gpuUpgrade libvirt-wiresharkUpgrade nbdkitUpgrade libvirt-daemon-driver-storageUpgrade libguestfs-man-pages-ukUpgrade virt-v2v-bash-completionUpgrade libnbdUpgrade qemu-kvm-block-rbdUpgrade qemu-pr-helperUpgrade qemu-kvm-device-display-virtio-gpu-pciUpgrade nbdkit-gzip-pluginUpgrade libiscsi-utilsUpgrade nbdkit-xz-filterUpgrade libvirt-daemon-driver-storage-scsiUpgrade qemu-kvm-block-sshUpgrade libnbd-bash-completionUpgrade nbdkit-nbd-pluginUpgrade nbdkit-bash-completionUpgrade nbdkit-gzip-filterUpgrade nbdkit-curl-pluginUpgrade nbdkit-tmpdisk-pluginUpgrade sgabios-binUpgrade nbdkit-linuxdisk-pluginUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade nbdfuseUpgrade libvirt-develUpgrade libguestfs-develUpgrade libguestfs-winsupportUpgrade libtpms-develUpgrade libvirt-daemon-driver-storage-coreUpgrade swtpm-toolsUpgrade libguestfs-javaUpgrade sgabiosUpgrade libvirt-dbusUpgrade libiscsiUpgrade qemu-kvm-audio-paUpgrade swtpmUpgrade libguestfs-man-pages-jaUpgrade libguestfs-rsyncUpgrade libvirt-daemonUpgrade hivex-develUpgrade virt-v2v-man-pages-jaUpgrade qemu-kvm-block-curlUpgrade virt-v2v-man-pages-ukUpgrade nbdkit-example-pluginsUpgrade qemu-guest-agentUpgrade libnbd-develUpgrade qemu-kvm-ui-egl-headlessUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-libsUpgrade netcf-libsUpgrade perl-Sys-VirtUpgrade qemu-kvm-block-iscsiUpgrade libguestfs-tools-cUpgrade virt-dibUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-storage-mpathUpgrade netcfUpgrade libguestfs-java-develUpgrade libguestfsUpgrade swtpm-develUpgrade swtpm-tools-pkcs11Upgrade qemu-kvm-commonUpgrade libvirt-daemon-driver-qemuUpgrade qemu-kvm-device-display-virtio-vgaUpgrade qemu-kvm-docsUpgrade libvirt-daemon-driver-storage-rbdUpgrade nbdkit-tar-pluginUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libguestfs-toolsUpgrade libvirt-daemon-driver-secretUpgrade nbdkit-basic-pluginsUpgrade seabios-binUpgrade superminUpgrade python3-hivexUpgrade ruby-libguestfsUpgrade python3-libvirtUpgrade libguestfs-gobjectUpgrade libguestfs-gfs2Upgrade perl-Sys-GuestfsUpgrade nbdkit-basic-filtersUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-clientUpgrade libtpmsUpgrade libguestfs-rescueUpgrade ruby-hivexUpgrade qemu-virtiofsdUpgrade qemu-kvm-coreUpgrade nbdkit-tar-filterUpgrade libguestfs-applianceUpgrade qemu-kvmUpgrade libguestfs-bash-completionUpgrade libvirt-daemon-config-networkUpgrade qemu-kvm-device-usb-redirectUpgrade libguestfs-javadocUpgrade libguestfs-gobject-develUpgrade supermin-develUpgrade qemu-kvm-toolsUpgrade qemu-imgUpgrade python3-libguestfsUpgrade lua-guestfsUpgrade libvirt-nssUpgrade nbdkit-python-pluginUpgrade libiscsi-develUpgrade seavgabios-binUpgrade nbdkit-develUpgrade qemu-kvm-ui-openglUpgrade qemu-kvm-device-usb-hostUpgrade qemu-kvm-block-glusterUpgrade nbdkit-vddk-pluginUpgrade libvirt-daemon-driver-nwfilterUpgrade virt-v2vUpgrade qemu-kvm-block-blkioUpgrade perl-hivexUpgrade netcf-develUpgrade nbdkit-ssh-pluginUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-interfaceUpgrade libguestfs-xfsUpgrade libguestfs-inspect-iconsUpgrade hivexUpgrade seabiosUpgrade libvirt-docsUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-nodedevUpgrade swtpm-libsUpgrade libvirtUpgrade python3-libnbdUpgrade nbdkit-serverUpgrade libvirt-daemon-kvmUpgrade libvirt-client-qemu | Oct 16, 2024 | Feb 19, 2024 |
| Redhat_linux | — | Upgrade qemu-kvm-toolsUpgrade qemu-kvm-device-display-virtio-gpu-ccw-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-debuginfoUpgrade qemu-kvm-core-debuginfoUpgrade qemu-kvm-device-display-virtio-vgaUpgrade qemu-kvm-audio-paUpgrade qemu-imgUpgrade qemu-kvm-coreUpgrade qemu-kvm-device-usb-hostUpgrade qemu-kvm-device-display-virtio-gpu-pciUpgrade qemu-guest-agent-debuginfoUpgrade qemu-kvm-device-usb-redirectUpgrade qemu-kvm-device-usb-redirect-debuginfoUpgrade qemu-kvm-ui-opengl-debuginfoUpgrade qemu-kvm-block-rbdUpgrade qemu-kvm-ui-egl-headlessUpgrade qemu-kvm-device-usb-host-debuginfoUpgrade qemu-kvm-ui-openglUpgrade qemu-kvm-block-blkio-debuginfoUpgrade qemu-pr-helperUpgrade qemu-kvm-ui-egl-headless-debuginfoUpgrade qemu-kvm-debuginfoUpgrade qemu-kvm-block-curl-debuginfoUpgrade qemu-kvm-common-debuginfoUpgrade qemu-kvm-device-display-virtio-gpuUpgrade qemu-kvm-device-display-virtio-vga-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-ccwUpgrade qemu-kvm-commonUpgrade qemu-kvm-block-rbd-debuginfoUpgrade qemu-kvm-audio-dbus-debuginfoUpgrade qemu-kvm-docsUpgrade qemu-kvm-block-curlUpgrade qemu-kvm-device-display-virtio-gpu-pci-debuginfoUpgrade qemu-kvmUpgrade qemu-img-debuginfoUpgrade qemu-kvm-tools-debuginfoUpgrade qemu-kvm-ui-dbus-debuginfoUpgrade qemu-guest-agentUpgrade qemu-kvm-audio-pa-debuginfoUpgrade qemu-kvm-debugsourceUpgrade qemu-kvm-block-blkioUpgrade qemu-kvm-tests-debuginfoUpgrade qemu-pr-helper-debuginfo | Nov 13, 2024 | Feb 19, 2024 |
| Rocky_linux | — | Upgrade qemu-kvm-ui-egl-headlessUpgrade qemu-img-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-ccwUpgrade qemu-kvm-ui-opengl-debuginfoUpgrade qemu-kvm-docsUpgrade qemu-kvm-device-display-virtio-vga-debuginfoUpgrade qemu-kvm-commonUpgrade qemu-kvm-ui-openglUpgrade qemu-kvmUpgrade qemu-kvm-tools-debuginfoUpgrade qemu-kvm-device-usb-hostUpgrade qemu-kvm-core-debuginfoUpgrade qemu-kvm-block-rbd-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-ccw-debuginfoUpgrade qemu-kvm-toolsUpgrade qemu-kvm-block-blkioUpgrade qemu-kvm-audio-pa-debuginfoUpgrade qemu-kvm-ui-egl-headless-debuginfoUpgrade qemu-imgUpgrade qemu-kvm-device-display-virtio-vgaUpgrade qemu-kvm-debugsourceUpgrade qemu-guest-agent-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-debuginfoUpgrade qemu-kvm-debuginfoUpgrade qemu-kvm-block-rbdUpgrade qemu-kvm-coreUpgrade qemu-kvm-device-display-virtio-gpuUpgrade qemu-pr-helper-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-pci-debuginfoUpgrade qemu-pr-helperUpgrade qemu-kvm-block-curl-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-pciUpgrade qemu-kvm-block-blkio-debuginfoUpgrade qemu-kvm-audio-paUpgrade qemu-guest-agentUpgrade qemu-kvm-device-usb-redirect-debuginfoUpgrade qemu-kvm-common-debuginfoUpgrade qemu-kvm-device-usb-host-debuginfoUpgrade qemu-kvm-device-usb-redirectUpgrade qemu-kvm-block-curl | Mar 18, 2025 | Feb 19, 2024 |
| Suse | — | Upgrade qemu-ui-cursesUpgrade qemu-block-nfsUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-toolsUpgrade qemu-kvmUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-block-glusterUpgrade qemu-audio-dbusUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-vgabiosUpgrade qemu-sgabiosUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-ui-dbusUpgrade qemu-armUpgrade qemu-hw-usb-hostUpgrade qemuUpgrade qemu-s390xUpgrade qemu-x86Upgrade qemu-microvmUpgrade qemu-SLOFUpgrade qemu-hw-display-qxlUpgrade qemu-ivshmem-toolsUpgrade qemu-block-dmgUpgrade qemu-seabiosUpgrade qemu-audio-paUpgrade qemu-hw-usb-redirectUpgrade qemu-chardev-baumUpgrade qemu-block-rbdUpgrade qemu-ksmUpgrade qemu-ui-gtkUpgrade qemu-ppcUpgrade qemu-audio-alsaUpgrade qemu-chardev-spiceUpgrade qemu-ui-spice-appUpgrade qemu-block-iscsiUpgrade qemu-accel-qtestUpgrade qemu-accel-tcg-x86Upgrade qemu-skibootUpgrade qemu-vhost-user-gpuUpgrade qemu-ui-spice-coreUpgrade qemu-block-curlUpgrade qemu-guest-agentUpgrade qemu-audio-jackUpgrade qemu-langUpgrade qemu-hw-usb-smartcardUpgrade qemu-block-sshUpgrade qemu-extraUpgrade qemu-ui-openglUpgrade qemu-ipxeUpgrade qemu-audio-spice | Apr 4, 2024 | Feb 19, 2024 |
| Ubuntu | — | Upgrade qemu-system-s390xUpgrade qemu-system-sparcUpgrade qemu-system-armUpgrade qemu-system-ppcUpgrade qemu-system-mipsUpgrade qemu-systemUpgrade qemu-system-miscUpgrade qemu-system-x86 | Aug 23, 2024 | Feb 19, 2024 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub