The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The (1) BMDMA and (2) AHCI HBA interfaces in the IDE functionality in QEMU 1.0 through 2.1.3 have multiple interpretations of a function's return value, which allows guest OS users to cause a host OS denial of service (memory consumption or infinite loop, and system crash) via a PRDT with zero complete sectors, related to the bmdma_prepare_buf and ahci_dma_prepare_buf functions.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemu | Aug 30, 2017 | Apr 21, 2015 |
| Debian | — | Upgrade qemu | Jul 30, 2024 | Apr 21, 2015 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Oct 31, 2014 |
| Suse | — | Upgrade xen-toolsUpgrade xen-develUpgrade qemu-guest-agentUpgrade qemu-toolsUpgrade xen-kmp-paeUpgrade qemu-seabiosUpgrade qemu-ppcUpgrade qemu-ipxeUpgrade qemu-langUpgrade qemu-block-curlUpgrade qemu-block-rbdUpgrade qemu-x86Upgrade kvmUpgrade xenUpgrade qemu-kvmUpgrade xen-doc-htmlUpgrade xen-libsUpgrade xen-tools-domUUpgrade qemu-vgabiosUpgrade xen-kmp-defaultUpgrade qemu-s390Upgrade qemuUpgrade qemu-sgabiosUpgrade xen-doc-pdfUpgrade xen-libs-32bit | Mar 28, 2016 | Apr 21, 2015 |
| Ubuntu | — | Upgrade qemu-systemUpgrade qemu-system-x86Upgrade qemu-system-mipsUpgrade qemu-system-ppcUpgrade qemu-system-aarch64Upgrade qemu-system-armUpgrade qemu-system-miscUpgrade qemu-system-sparcUpgrade qemu-kvm | Nov 8, 2024 | Apr 21, 2015 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub