A NULL pointer dereference flaw was found in the am53c974 SCSI host bus adapter emulation of QEMU in versions before 6.0.0. This issue occurs while handling the 'Information Transfer' command. This flaw allows a privileged guest user to crash the QEMU process on the host, resulting in a denial of service. The highest threat from this vulnerability is to system availability.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemu | Aug 22, 2024 | May 28, 2021 |
| Debian | — | Upgrade qemu | Sep 6, 2022 | May 28, 2021 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Aug 16, 2022 | May 28, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade qemu-img | Jan 28, 2022 | May 28, 2021 |
| Suse | — | Upgrade qemu-ppcUpgrade qemu-block-glusterUpgrade qemuUpgrade qemu-audio-paUpgrade qemu-hw-usb-redirectUpgrade qemu-armUpgrade qemu-linux-userUpgrade qemu-ivshmem-toolsUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-audio-ossUpgrade qemu-ui-cursesUpgrade qemu-block-dmgUpgrade qemu-block-nfsUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-toolsUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-x86Upgrade qemu-skibootUpgrade qemu-ui-spice-appUpgrade qemu-ui-openglUpgrade qemu-hw-display-qxlUpgrade qemu-guest-agentUpgrade qemu-langUpgrade qemu-block-rbdUpgrade qemu-testsuiteUpgrade qemu-s390Upgrade qemu-block-iscsiUpgrade qemu-ui-gtkUpgrade qemu-chardev-baumUpgrade qemu-seabiosUpgrade qemu-vgabiosUpgrade qemu-block-curlUpgrade qemu-hw-usb-smartcardUpgrade qemu-audio-spiceUpgrade qemu-s390xUpgrade qemu-ui-sdlUpgrade qemu-sgabiosUpgrade qemu-extraUpgrade qemu-microvmUpgrade qemu-kvmUpgrade qemu-audio-sdlUpgrade qemu-vhost-user-gpuUpgrade qemu-ui-spice-coreUpgrade qemu-block-sshUpgrade qemu-ksmUpgrade qemu-chardev-spiceUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-audio-alsaUpgrade qemu-ipxe | Aug 21, 2021 | May 28, 2021 |
| Ubuntu | — | Upgrade qemu-common (Ubuntu Pro)Upgrade qemu-system-mips (Ubuntu Pro)Upgrade qemu-block-extra (Ubuntu Pro)Upgrade qemu-system-x86Upgrade qemu-utils (Ubuntu Pro)Upgrade qemu-system-x86 (Ubuntu Pro)Upgrade qemu-kvm (Ubuntu Pro)Upgrade qemu-system-sparc (Ubuntu Pro)Upgrade qemu-system-aarch64 (Ubuntu Pro)Upgrade qemu-system-miscUpgrade qemu-system-sparcUpgrade qemu-system-mipsUpgrade qemu-system-common (Ubuntu Pro)Upgrade qemu-guest-agent (Ubuntu Pro)Upgrade qemu-system-x86-microvmUpgrade qemu-user-binfmt (Ubuntu Pro)Upgrade qemu-user (Ubuntu Pro)Upgrade qemu-system-x86-xenUpgrade qemu (Ubuntu Pro)Upgrade qemu-user-static (Ubuntu Pro)Upgrade qemu-system-s390x (Ubuntu Pro)Upgrade qemu-system-armUpgrade qemu-system-arm (Ubuntu Pro)Upgrade qemu-system-s390xUpgrade qemu-keymaps (Ubuntu Pro)Upgrade qemu-system-misc (Ubuntu Pro)Upgrade qemu-system-ppc (Ubuntu Pro)Upgrade qemu-system-ppcUpgrade qemu-systemUpgrade qemu-system (Ubuntu Pro) | Jul 16, 2021 | May 28, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub