A use-after-free vulnerability was found in the QEMU LSI53C895A SCSI Host Bus Adapter emulation. This issue can lead to a crash or VM escape.
CVSS Details
- CVSS 3.1 Base Score: 8.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade qemu-user-binfmtUpgrade qemu-kvmUpgrade qemu-ui-sdlUpgrade qemu-ui-cursesUpgrade qemu-block-dmgUpgrade qemuUpgrade qemu-kvm-coreUpgrade qemu-debuginfoUpgrade qemu-user-staticUpgrade qemu-imgUpgrade qemu-system-aarch64Upgrade qemu-block-nfsUpgrade qemu-system-x86-coreUpgrade qemu-commonUpgrade qemu-audio-sdlUpgrade ivshmem-toolsUpgrade qemu-guest-agentUpgrade qemu-block-sshUpgrade qemu-audio-ossUpgrade qemu-block-curlUpgrade qemu-userUpgrade qemu-audio-paUpgrade qemu-system-aarch64-coreUpgrade qemu-audio-alsaUpgrade qemu-ui-gtkUpgrade qemu-block-rbdUpgrade qemu-block-iscsiUpgrade qemu-system-x86 | Feb 5, 2025 | Oct 21, 2024 |
| Debian | — | Upgrade qemu | May 15, 2025 | Oct 21, 2024 |
| Ubuntu | — | Upgrade qemu-system-x86-xen (Ubuntu Pro)Upgrade qemu-system (Ubuntu Pro)Upgrade qemu-system-common (Ubuntu Pro)Upgrade qemu-system-armUpgrade qemu-system-gui (Ubuntu Pro)Upgrade qemu-system-x86Upgrade qemu-user-static (Ubuntu Pro)Upgrade qemu-user-binfmt (Ubuntu Pro)Upgrade qemu-system-miscUpgrade qemu-system-guiUpgrade qemu-utils (Ubuntu Pro)Upgrade qemu-guest-agent (Ubuntu Pro)Upgrade qemu-system-xenUpgrade qemuUpgrade qemu-system-dataUpgrade qemu-system-riscvUpgrade qemu-system-arm (Ubuntu Pro)Upgrade qemu-system-modules-spiceUpgrade qemu-system-ppcUpgrade qemu-system-misc (Ubuntu Pro)Upgrade qemu-kvm (Ubuntu Pro)Upgrade qemu-system-x86 (Ubuntu Pro)Upgrade qemu-systemUpgrade qemu-system-mips (Ubuntu Pro)Upgrade qemu-system-ppc (Ubuntu Pro)Upgrade qemu-system-mipsUpgrade qemu-system-modules-openglUpgrade qemu-common (Ubuntu Pro)Upgrade qemu-system-s390x (Ubuntu Pro)Upgrade qemu-system-x86-microvm (Ubuntu Pro)Upgrade qemu (Ubuntu Pro)Upgrade qemu-block-extra (Ubuntu Pro)Upgrade qemu-system-x86-microvmUpgrade qemu-system-data (Ubuntu Pro)Upgrade qemu-system-x86-xenUpgrade qemu-system-aarch64 (Ubuntu Pro)Upgrade qemu-system-s390xUpgrade qemu-system-sparc (Ubuntu Pro)Upgrade qemu-system-commonUpgrade qemu-system-sparcUpgrade qemu-keymaps (Ubuntu Pro)Upgrade qemu-user (Ubuntu Pro) | Jun 26, 2025 | Oct 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub