The xhci_ring_fetch function in hw/usb/hcd-xhci.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) by leveraging failure to limit the number of link Transfer Request Blocks (TRB) to process.
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemu | Aug 22, 2024 | Nov 4, 2016 |
| Debian | — | Upgrade qemu-kvmUpgrade qemu | Mar 31, 2017 | Oct 25, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Nov 4, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvmUpgrade qemu-kvm-commonUpgrade qemu-img | Dec 4, 2019 | Nov 4, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-kvm-common | Apr 16, 2020 | Nov 4, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Oct 6, 2016 |
| Suse | — | Upgrade qemu-s390Upgrade qemu-x86Upgrade qemu-skibootUpgrade qemu-kvmUpgrade xen-doc-htmlUpgrade qemu-chardev-baumUpgrade xen-kmp-defaultUpgrade qemu-ipxeUpgrade xen-kmp-paeUpgrade xen-tools-domUUpgrade qemu-audio-alsaUpgrade xen-libsUpgrade qemu-ui-spice-appUpgrade qemu-ksmUpgrade xen-libs-32bitUpgrade qemu-seabiosUpgrade qemu-block-curlUpgrade qemu-ui-cursesUpgrade qemu-block-iscsiUpgrade qemu-microvmUpgrade qemu-ui-gtkUpgrade qemu-audio-spiceUpgrade qemu-hw-usb-redirectUpgrade qemu-sgabiosUpgrade qemu-ui-spice-coreUpgrade qemu-langUpgrade qemu-vgabiosUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-s390xUpgrade qemuUpgrade kvmUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-hw-display-qxlUpgrade xenUpgrade qemu-toolsUpgrade qemu-ui-openglUpgrade qemu-ppcUpgrade qemu-block-sshUpgrade qemu-chardev-spiceUpgrade xen-toolsUpgrade qemu-block-rbdUpgrade qemu-hw-display-virtio-gpuUpgrade xen-develUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-guest-agentUpgrade qemu-audio-ossUpgrade qemu-audio-paUpgrade qemu-arm | Nov 23, 2016 | Nov 4, 2016 |
| Ubuntu | — | Upgrade qemu-system-mipsUpgrade qemu-system-miscUpgrade qemu-system-s390xUpgrade qemu-system-ppcUpgrade qemu-system-aarch64Upgrade qemu-system-x86Upgrade qemu-system-armUpgrade qemu-systemUpgrade qemu-system-sparcUpgrade qemu-kvm | Nov 9, 2016 | Nov 4, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub