QEMU 5.0.0 has a use-after-free in hw/usb/hcd-xhci.c because the usb_packet_map return value is not checked.
CVSS Details
- CVSS 3.1 Base Score: 3.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemu | Aug 22, 2024 | Sep 25, 2020 |
| Debian | — | Upgrade qemu | Feb 19, 2021 | Sep 25, 2020 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Dec 15, 2020 |
| Oracle_linux | — | Upgrade qemu-kvmUpgrade qemu-system-x86Upgrade qemu-system-aarch64-coreUpgrade qemu-kvm-coreUpgrade qemu-imgUpgrade qemu-block-iscsiUpgrade qemu-block-glusterUpgrade qemu-system-x86-coreUpgrade qemuUpgrade ivshmem-toolsUpgrade qemu-system-aarch64Upgrade qemu-commonUpgrade qemu-block-rbd | Feb 9, 2021 | Jun 24, 2020 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 25, 2020 |
| Suse | — | Upgrade qemu-seabiosUpgrade qemu-extraUpgrade qemu-audio-sdlUpgrade qemu-audio-paUpgrade qemu-block-iscsiUpgrade qemu-vgabiosUpgrade qemu-ksmUpgrade qemu-ui-cursesUpgrade qemu-block-curlUpgrade qemu-testsuiteUpgrade qemu-block-dmgUpgrade qemu-vhost-user-gpuUpgrade qemu-ui-gtkUpgrade qemu-langUpgrade qemu-microvmUpgrade qemu-kvmUpgrade qemu-s390Upgrade qemu-block-sshUpgrade qemu-audio-alsaUpgrade qemu-ppcUpgrade qemu-ui-spice-appUpgrade qemu-audio-ossUpgrade qemu-armUpgrade qemu-sgabiosUpgrade qemu-block-nfsUpgrade kvmUpgrade qemuUpgrade qemu-ui-sdlUpgrade qemu-guest-agentUpgrade qemu-block-glusterUpgrade qemu-ipxeUpgrade qemu-toolsUpgrade qemu-x86Upgrade qemu-block-rbdUpgrade qemu-linux-user | Apr 17, 2021 | Sep 25, 2020 |
| Ubuntu | — | Upgrade qemu-system-ppcUpgrade qemu-system-arm (Ubuntu Pro)Upgrade qemu-user-static (Ubuntu Pro)Upgrade qemu-guest-agent (Ubuntu Pro)Upgrade qemu-system-aarch64Upgrade qemu (Ubuntu Pro)Upgrade qemu-system-sparcUpgrade qemu-system-x86Upgrade qemu-user (Ubuntu Pro)Upgrade qemu-system-armUpgrade qemu-keymaps (Ubuntu Pro)Upgrade qemu-system-misc (Ubuntu Pro)Upgrade qemu-system (Ubuntu Pro)Upgrade qemu-system-miscUpgrade qemu-system-aarch64 (Ubuntu Pro)Upgrade qemu-system-common (Ubuntu Pro)Upgrade qemu-common (Ubuntu Pro)Upgrade qemu-systemUpgrade qemu-system-mips (Ubuntu Pro)Upgrade qemu-system-x86 (Ubuntu Pro)Upgrade qemu-system-s390xUpgrade qemu-system-x86-xenUpgrade qemu-system-mipsUpgrade qemu-kvm (Ubuntu Pro)Upgrade qemu-system-ppc (Ubuntu Pro)Upgrade qemu-utils (Ubuntu Pro)Upgrade qemu-system-sparc (Ubuntu Pro)Upgrade qemu-system-x86-microvm | Dec 1, 2020 | Sep 25, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub