An information disclosure vulnerability was found in the virtio vhost-user GPU device (vhost-user-gpu) of QEMU in versions up to and including 6.0. The flaw exists in virgl_cmd_get_capset_info() in contrib/vhost-user-gpu/virgl.c and could occur due to the read of uninitialized memory. A malicious guest could exploit this issue to leak memory from the host.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemu | Aug 22, 2024 | Jun 2, 2021 |
| Debian | — | Upgrade qemu | Nov 4, 2022 | Jun 2, 2021 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Aug 16, 2022 | Jun 2, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade qemu-img | Jan 28, 2022 | Jun 2, 2021 |
| Oracle_linux | — | Upgrade ruby-hivexUpgrade virt-dibUpgrade hivexUpgrade python3-libvirtUpgrade libvirt-daemon-driver-networkUpgrade qemu-system-x86Upgrade qemu-kvm-commonUpgrade qemu-system-aarch64-coreUpgrade seavgabios-binUpgrade sgabios-binUpgrade nbdkit-basic-pluginsUpgrade libvirt-daemon-driver-storage-rbdUpgrade libguestfs-gobjectUpgrade qemu-block-iscsiUpgrade seabiosUpgrade lua-guestfsUpgrade libguestfs-develUpgrade libvirt-nssUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-libsUpgrade libguestfs-java-develUpgrade libguestfs-javadocUpgrade libguestfs-gfs2Upgrade nbdkit-python-pluginUpgrade qemu-system-aarch64Upgrade libguestfsUpgrade libvirt-dbusUpgrade libvirt-docsUpgrade libvirt-daemon-driver-storageUpgrade netcf-libsUpgrade netcf-develUpgrade libiscsi-develUpgrade nbdkit-linuxdisk-pluginUpgrade python3-libnbdUpgrade supermin-develUpgrade libiscsiUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade ruby-libguestfsUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-daemon-driver-storage-scsiUpgrade libguestfs-javaUpgrade libvirt-daemon-driver-storage-logicalUpgrade perl-hivexUpgrade libvirt-daemon-driver-interfaceUpgrade qemu-kvm-block-rbdUpgrade qemu-kvm-coreUpgrade qemu-imgUpgrade libvirt-daemon-driver-qemuUpgrade nbdkit-ssh-pluginUpgrade hivex-develUpgrade nbdkitUpgrade qemu-kvm-block-sshUpgrade libvirt-daemon-config-nwfilterUpgrade nbdkit-gzip-pluginUpgrade perl-Sys-VirtUpgrade libnbd-develUpgrade libguestfs-rescueUpgrade libvirt-daemon-config-networkUpgrade qemu-kvmUpgrade qemu-guest-agentUpgrade nbdkit-bash-completionUpgrade virt-v2vUpgrade sgabiosUpgrade seabios-binUpgrade libvirt-daemonUpgrade qemu-block-rbdUpgrade libvirt-adminUpgrade libguestfs-winsupportUpgrade libguestfs-rsyncUpgrade libguestfs-bash-completionUpgrade ivshmem-toolsUpgrade qemu-kvm-block-iscsiUpgrade libiscsi-utilsUpgrade libguestfs-toolsUpgrade libguestfs-gobject-develUpgrade qemu-kvm-block-curlUpgrade libvirt-develUpgrade netcfUpgrade libvirt-daemon-driver-nwfilterUpgrade perl-Sys-GuestfsUpgrade libvirt-daemon-kvmUpgrade libvirtUpgrade qemu-commonUpgrade nbdkit-develUpgrade nbdkit-curl-pluginUpgrade qemu-kvm-block-glusterUpgrade libguestfs-xfsUpgrade nbdkit-vddk-pluginUpgrade libvirt-lock-sanlockUpgrade libguestfs-inspect-iconsUpgrade libguestfs-benchmarkingUpgrade libguestfs-man-pages-ukUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-bash-completionUpgrade libvirt-daemon-driver-storage-glusterUpgrade superminUpgrade qemuUpgrade python3-hivexUpgrade nbdkit-basic-filtersUpgrade libvirt-daemon-driver-storage-mpathUpgrade python3-libguestfsUpgrade nbdfuseUpgrade qemu-system-x86-coreUpgrade qemu-block-glusterUpgrade libvirt-daemon-driver-secretUpgrade libguestfs-man-pages-jaUpgrade nbdkit-xz-filterUpgrade nbdkit-example-pluginsUpgrade nbdkit-serverUpgrade libvirt-clientUpgrade libnbdUpgrade libguestfs-tools-c | Aug 17, 2021 | May 4, 2021 |
| Suse | — | Upgrade qemu-hw-usb-redirectUpgrade qemu-langUpgrade qemu-linux-userUpgrade qemu-ui-gtkUpgrade qemu-block-curlUpgrade qemu-audio-paUpgrade qemu-hw-usb-smartcardUpgrade qemu-armUpgrade qemu-block-glusterUpgrade qemu-guest-agentUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-block-iscsiUpgrade qemu-accel-tcg-x86Upgrade qemu-audio-alsaUpgrade qemuUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-ui-spice-coreUpgrade qemu-testsuiteUpgrade qemu-hw-usb-hostUpgrade qemu-hw-display-qxlUpgrade qemu-x86Upgrade qemu-ppcUpgrade qemu-microvmUpgrade qemu-skibootUpgrade qemu-ui-cursesUpgrade qemu-vgabiosUpgrade qemu-toolsUpgrade qemu-ipxeUpgrade qemu-block-dmgUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-audio-sdlUpgrade qemu-ivshmem-toolsUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-block-nfsUpgrade qemu-ui-openglUpgrade qemu-chardev-baumUpgrade qemu-ui-spice-appUpgrade qemu-block-rbdUpgrade qemu-audio-spiceUpgrade qemu-sgabiosUpgrade qemu-block-sshUpgrade qemu-ui-sdlUpgrade qemu-kvmUpgrade qemu-ksmUpgrade qemu-chardev-spiceUpgrade qemu-s390xUpgrade qemu-SLOFUpgrade qemu-seabiosUpgrade qemu-extraUpgrade qemu-s390Upgrade qemu-vhost-user-gpu | Jul 1, 2021 | Jun 2, 2021 |
| Ubuntu | — | Upgrade qemu-system-armUpgrade qemu-system-s390xUpgrade qemu-system-x86-microvmUpgrade qemu-system-x86-xenUpgrade qemu-system-x86Upgrade qemu-system-sparcUpgrade qemu-system-mipsUpgrade qemu-system-miscUpgrade qemu-systemUpgrade qemu-system-ppc | Jul 16, 2021 | Jun 2, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub