The xhci_ring_fetch function in hw/usb/hcd-xhci.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) by leveraging failure to limit the number of link Transfer Request Blocks (TRB) to process.
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemu | Aug 22, 2024 | Nov 4, 2016 |
| Debian | — | Upgrade qemuUpgrade qemu-kvm | Mar 31, 2017 | Oct 25, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Nov 4, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-imgUpgrade qemu-kvm-commonUpgrade qemu-kvm | Dec 4, 2019 | Nov 4, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-kvm-common | Apr 16, 2020 | Nov 4, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Oct 6, 2016 |
| Suse | — | Upgrade qemu-x86Upgrade qemu-ui-cursesUpgrade qemu-skibootUpgrade xen-libsUpgrade qemu-microvmUpgrade qemu-s390Upgrade qemu-ksmUpgrade xen-tools-domUUpgrade qemu-ui-spice-appUpgrade xen-kmp-paeUpgrade qemu-ui-gtkUpgrade qemu-block-curlUpgrade xen-libs-32bitUpgrade qemu-audio-alsaUpgrade qemu-audio-spiceUpgrade xen-kmp-defaultUpgrade xen-doc-htmlUpgrade qemu-seabiosUpgrade qemu-kvmUpgrade qemu-block-iscsiUpgrade qemu-chardev-baumUpgrade qemu-ipxeUpgrade qemu-hw-usb-redirectUpgrade qemu-toolsUpgrade qemu-ppcUpgrade xen-develUpgrade qemu-sgabiosUpgrade qemu-armUpgrade qemu-hw-display-qxlUpgrade qemu-ui-spice-coreUpgrade qemu-guest-agentUpgrade qemu-block-sshUpgrade qemu-audio-paUpgrade qemu-vgabiosUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-chardev-spiceUpgrade qemu-block-rbdUpgrade qemu-hw-display-virtio-gpuUpgrade xen-toolsUpgrade qemu-ui-openglUpgrade qemu-audio-ossUpgrade xenUpgrade qemu-hw-display-virtio-vgaUpgrade kvmUpgrade qemu-s390xUpgrade qemu-langUpgrade qemuUpgrade qemu-hw-s390x-virtio-gpu-ccw | Nov 23, 2016 | Nov 4, 2016 |
| Ubuntu | — | Upgrade qemu-system-mipsUpgrade qemu-system-ppcUpgrade qemu-system-miscUpgrade qemu-system-aarch64Upgrade qemu-system-s390xUpgrade qemu-kvmUpgrade qemu-system-x86Upgrade qemu-system-sparcUpgrade qemu-systemUpgrade qemu-system-arm | Nov 9, 2016 | Nov 4, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub