An issue was discovered in QEMU 7.1.0 through 8.2.1. register_vfs in hw/pci/pcie_sriov.c mishandles the situation where a guest writes NumVFs greater than TotalVFs, leading to a buffer overflow in VF implementations.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade qemu-guest-agentUpgrade qemu-kvm-toolsUpgrade qemu-kvm-device-usb-hostUpgrade qemu-kvm-coreUpgrade qemu-kvm-audio-paUpgrade qemu-pr-helperUpgrade qemu-kvm-device-usb-redirectUpgrade qemu-kvm-device-display-virtio-gpu-ccwUpgrade qemu-kvm-block-curlUpgrade qemu-kvm-device-display-virtio-vgaUpgrade qemu-kvm-block-rbdUpgrade qemu-kvm-ui-egl-headlessUpgrade qemu-imgUpgrade qemu-kvm-commonUpgrade qemu-kvm-block-blkioUpgrade qemu-kvm-device-display-virtio-gpu-pciUpgrade qemu-kvm-docsUpgrade qemu-kvmUpgrade qemu-kvm-device-display-virtio-gpuUpgrade qemu-kvm-ui-opengl | Nov 19, 2024 | Feb 19, 2024 |
| Debian | — | Upgrade qemu | Jul 30, 2024 | Feb 19, 2024 |
| Oracle_linux | — | Upgrade libtpms-develUpgrade qemu-kvm-block-sshUpgrade libnbd-bash-completionUpgrade libvirt-wiresharkUpgrade libiscsi-utilsUpgrade libnbdUpgrade qemu-kvm-device-display-virtio-gpuUpgrade libvirt-dbusUpgrade nbdkit-example-pluginsUpgrade qemu-kvm-audio-paUpgrade sgabiosUpgrade libvirt-daemon-driver-storage-scsiUpgrade swtpmUpgrade hivex-develUpgrade libguestfs-rsyncUpgrade nbdkit-curl-pluginUpgrade virt-v2v-man-pages-ukUpgrade libiscsiUpgrade virt-v2v-bash-completionUpgrade virt-v2v-man-pages-jaUpgrade swtpm-toolsUpgrade libvirt-daemonUpgrade qemu-kvm-block-curlUpgrade libguestfs-javaUpgrade libguestfs-java-develUpgrade libguestfs-tools-cUpgrade libguestfsUpgrade libvirt-daemon-config-nwfilterUpgrade nbdkit-gzip-pluginUpgrade sgabios-binUpgrade netcfUpgrade libvirt-daemon-driver-storage-mpathUpgrade libguestfs-winsupportUpgrade libvirt-develUpgrade libguestfs-develUpgrade libvirt-daemon-driver-storage-coreUpgrade libguestfs-man-pages-ukUpgrade qemu-pr-helperUpgrade qemu-guest-agentUpgrade qemu-kvm-block-iscsiUpgrade qemu-kvm-device-display-virtio-gpu-pciUpgrade nbdfuseUpgrade nbdkitUpgrade nbdkit-bash-completionUpgrade qemu-kvm-block-rbdUpgrade libvirt-daemon-driver-storageUpgrade libvirt-lock-sanlockUpgrade nbdkit-gzip-filterUpgrade nbdkit-linuxdisk-pluginUpgrade qemu-kvm-ui-egl-headlessUpgrade nbdkit-nbd-pluginUpgrade libguestfs-man-pages-jaUpgrade nbdkit-xz-filterUpgrade libnbd-develUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-libsUpgrade virt-dibUpgrade netcf-libsUpgrade perl-Sys-VirtUpgrade nbdkit-tmpdisk-pluginUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade libvirt-daemon-driver-storage-logicalUpgrade seavgabios-binUpgrade libvirt-daemon-driver-storage-rbdUpgrade qemu-kvm-device-usb-hostUpgrade nbdkit-vddk-pluginUpgrade swtpm-tools-pkcs11Upgrade nbdkit-develUpgrade libiscsi-develUpgrade qemu-kvm-ui-openglUpgrade libguestfs-inspect-iconsUpgrade perl-hivexUpgrade nbdkit-tar-pluginUpgrade virt-v2vUpgrade libvirt-daemon-driver-networkUpgrade qemu-kvm-docsUpgrade qemu-kvm-block-blkioUpgrade nbdkit-ssh-pluginUpgrade libvirt-daemon-driver-interfaceUpgrade libguestfs-xfsUpgrade libguestfs-javadocUpgrade netcf-develUpgrade libvirt-client-qemuUpgrade qemu-kvm-commonUpgrade libvirt-daemon-driver-secretUpgrade libguestfs-toolsUpgrade libguestfs-gobjectUpgrade qemu-virtiofsdUpgrade nbdkit-tar-filterUpgrade libvirt-daemon-driver-storage-diskUpgrade qemu-kvm-coreUpgrade qemu-kvmUpgrade libvirt-clientUpgrade libtpmsUpgrade libguestfs-rescueUpgrade libguestfs-applianceUpgrade ruby-hivexUpgrade superminUpgrade python3-hivexUpgrade seabios-binUpgrade ruby-libguestfsUpgrade python3-libvirtUpgrade nbdkit-basic-pluginsUpgrade qemu-kvm-device-display-virtio-vgaUpgrade libvirt-daemon-driver-qemuUpgrade libguestfs-gfs2Upgrade qemu-kvm-toolsUpgrade qemu-imgUpgrade python3-libguestfsUpgrade nbdkit-python-pluginUpgrade lua-guestfsUpgrade libguestfs-gobject-develUpgrade libvirt-nssUpgrade supermin-develUpgrade libvirt-daemon-driver-nwfilterUpgrade qemu-kvm-device-usb-redirectUpgrade python3-libnbdUpgrade perl-Sys-GuestfsUpgrade nbdkit-serverUpgrade nbdkit-basic-filtersUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-config-networkUpgrade libvirtUpgrade swtpm-libsUpgrade swtpm-develUpgrade qemu-kvm-block-glusterUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libguestfs-bash-completionUpgrade hivexUpgrade seabiosUpgrade libvirt-docs | Oct 16, 2024 | Feb 19, 2024 |
| Redhat_linux | — | Upgrade qemu-kvm-block-rbdUpgrade qemu-kvm-device-usb-hostUpgrade qemu-kvm-device-usb-redirectUpgrade qemu-kvm-device-usb-redirect-debuginfoUpgrade qemu-kvm-block-blkio-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-debuginfoUpgrade qemu-kvm-audio-paUpgrade qemu-kvm-device-display-virtio-vgaUpgrade qemu-kvm-debuginfoUpgrade qemu-kvm-core-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-ccw-debuginfoUpgrade qemu-kvm-ui-openglUpgrade qemu-pr-helperUpgrade qemu-kvm-ui-egl-headlessUpgrade qemu-kvm-device-usb-host-debuginfoUpgrade qemu-imgUpgrade qemu-kvm-ui-egl-headless-debuginfoUpgrade qemu-kvm-toolsUpgrade qemu-kvm-coreUpgrade qemu-guest-agent-debuginfoUpgrade qemu-kvm-ui-opengl-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-pciUpgrade qemu-kvm-audio-dbus-debuginfoUpgrade qemu-guest-agentUpgrade qemu-kvm-docsUpgrade qemu-kvm-ui-dbus-debuginfoUpgrade qemu-kvm-device-display-virtio-vga-debuginfoUpgrade qemu-kvm-block-rbd-debuginfoUpgrade qemu-kvm-device-display-virtio-gpuUpgrade qemu-kvm-device-display-virtio-gpu-ccwUpgrade qemu-kvm-commonUpgrade qemu-kvm-tests-debuginfoUpgrade qemu-pr-helper-debuginfoUpgrade qemu-kvm-block-curl-debuginfoUpgrade qemu-img-debuginfoUpgrade qemu-kvm-debugsourceUpgrade qemu-kvm-block-blkioUpgrade qemu-kvm-common-debuginfoUpgrade qemu-kvm-audio-pa-debuginfoUpgrade qemu-kvm-tools-debuginfoUpgrade qemu-kvmUpgrade qemu-kvm-device-display-virtio-gpu-pci-debuginfoUpgrade qemu-kvm-block-curl | Nov 13, 2024 | Feb 19, 2024 |
| Rocky_linux | — | Upgrade qemu-kvm-ui-egl-headless-debuginfoUpgrade qemu-kvm-audio-pa-debuginfoUpgrade qemu-kvm-device-usb-hostUpgrade qemu-kvm-ui-openglUpgrade qemu-kvm-tools-debuginfoUpgrade qemu-imgUpgrade qemu-kvm-commonUpgrade qemu-img-debuginfoUpgrade qemu-kvm-device-display-virtio-vga-debuginfoUpgrade qemu-kvm-ui-egl-headlessUpgrade qemu-kvm-toolsUpgrade qemu-kvm-device-display-virtio-gpu-ccw-debuginfoUpgrade qemu-kvm-block-blkioUpgrade qemu-kvm-core-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-ccwUpgrade qemu-kvm-docsUpgrade qemu-kvm-ui-opengl-debuginfoUpgrade qemu-kvm-block-rbd-debuginfoUpgrade qemu-kvmUpgrade qemu-pr-helper-debuginfoUpgrade qemu-kvm-coreUpgrade qemu-kvm-device-display-virtio-gpu-pci-debuginfoUpgrade qemu-guest-agent-debuginfoUpgrade qemu-guest-agentUpgrade qemu-kvm-device-usb-host-debuginfoUpgrade qemu-kvm-device-display-virtio-vgaUpgrade qemu-kvm-debuginfoUpgrade qemu-kvm-device-display-virtio-gpuUpgrade qemu-kvm-device-display-virtio-gpu-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-pciUpgrade qemu-kvm-block-curl-debuginfoUpgrade qemu-kvm-debugsourceUpgrade qemu-pr-helperUpgrade qemu-kvm-block-rbdUpgrade qemu-kvm-common-debuginfoUpgrade qemu-kvm-block-curlUpgrade qemu-kvm-device-usb-redirect-debuginfoUpgrade qemu-kvm-device-usb-redirectUpgrade qemu-kvm-block-blkio-debuginfoUpgrade qemu-kvm-audio-pa | Mar 18, 2025 | Feb 19, 2024 |
| Suse | — | Upgrade qemu-audio-alsaUpgrade qemu-audio-paUpgrade qemu-extraUpgrade qemu-block-iscsiUpgrade qemu-ui-spice-appUpgrade qemu-guest-agentUpgrade qemu-chardev-baumUpgrade qemu-accel-qtestUpgrade qemu-block-rbdUpgrade qemu-ui-openglUpgrade qemu-ui-spice-coreUpgrade qemu-audio-spiceUpgrade qemu-block-curlUpgrade qemu-skibootUpgrade qemu-ipxeUpgrade qemu-seabiosUpgrade qemu-audio-jackUpgrade qemu-langUpgrade qemu-hw-usb-redirectUpgrade qemu-vhost-user-gpuUpgrade qemu-accel-tcg-x86Upgrade qemu-ui-gtkUpgrade qemu-block-dmgUpgrade qemu-ksmUpgrade qemu-ppcUpgrade qemu-hw-usb-smartcardUpgrade qemu-chardev-spiceUpgrade qemu-block-sshUpgrade qemu-block-glusterUpgrade qemu-toolsUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-ivshmem-toolsUpgrade qemu-SLOFUpgrade qemu-kvmUpgrade qemu-vgabiosUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-s390xUpgrade qemu-x86Upgrade qemu-ui-dbusUpgrade qemu-audio-dbusUpgrade qemu-sgabiosUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-ui-cursesUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-block-nfsUpgrade qemu-armUpgrade qemuUpgrade qemu-hw-usb-hostUpgrade qemu-hw-display-qxlUpgrade qemu-microvm | Apr 4, 2024 | Feb 19, 2024 |
| Ubuntu | — | Upgrade qemu-systemUpgrade qemu-system-miscUpgrade qemu-system-x86Upgrade qemu-system-ppcUpgrade qemu-system-mipsUpgrade qemu-system-s390xUpgrade qemu-system-armUpgrade qemu-system-sparc | Aug 23, 2024 | Feb 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub