A flaw was found in QEMU. An assertion failure was present in the usb_ep_get() function in hw/net/core.c when trying to get the USB endpoint from a USB device. This flaw may allow a malicious unprivileged guest user to crash the QEMU process on the host and cause a denial of service condition.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade qemu-system-x86-coreUpgrade qemu-system-aarch64Upgrade qemu-debuginfoUpgrade qemu-imgUpgrade qemu-system-x86Upgrade qemu-block-nfsUpgrade qemu-block-dmgUpgrade qemuUpgrade qemu-audio-paUpgrade qemu-user-binfmtUpgrade qemu-ui-sdlUpgrade qemu-kvm-coreUpgrade qemu-user-staticUpgrade qemu-ui-cursesUpgrade qemu-kvmUpgrade qemu-commonUpgrade qemu-ui-gtkUpgrade qemu-system-aarch64-coreUpgrade qemu-audio-ossUpgrade qemu-userUpgrade qemu-block-curlUpgrade qemu-block-iscsiUpgrade qemu-block-sshUpgrade qemu-audio-alsaUpgrade qemu-guest-agentUpgrade ivshmem-toolsUpgrade qemu-block-rbdUpgrade qemu-audio-sdl | May 20, 2026 | May 20, 2026 |
| Debian | — | No solution exists | May 15, 2025 | Sep 19, 2024 |
| Oracle_linux | — | Upgrade libvirt-daemon-driver-storage-glusterUpgrade qemu-kvm-block-rbdUpgrade qemu-kvmUpgrade nbdkit-basic-pluginsUpgrade nbdkit-python-pluginUpgrade python3-hivexUpgrade nbdkit-serverUpgrade nbdkit-xz-filterUpgrade libguestfs-inspect-iconsUpgrade qemu-kvm-block-curlUpgrade libiscsi-develUpgrade swtpm-libsUpgrade python3-libguestfsUpgrade python3-libnbdUpgrade libiscsi-utilsUpgrade qemu-guest-agentUpgrade virt-v2v-bash-completionUpgrade libvirt-lock-sanlockUpgrade virt-v2vUpgrade libguestfs-man-pages-ukUpgrade supermin-develUpgrade virt-v2v-man-pages-jaUpgrade libguestfs-rescueUpgrade qemu-kvm-block-sshUpgrade libguestfs-winsupportUpgrade libguestfs-toolsUpgrade seabiosUpgrade libvirt-daemon-driver-networkUpgrade superminUpgrade libvirtUpgrade libvirt-clientUpgrade libvirt-daemon-driver-nodedevUpgrade nbdkit-tar-filterUpgrade qemu-kvm-block-glusterUpgrade nbdkit-basic-filtersUpgrade libguestfs-applianceUpgrade libvirt-daemon-driver-qemuUpgrade sgabiosUpgrade libguestfs-gobject-develUpgrade libguestfs-xfsUpgrade libguestfs-bash-completionUpgrade swtpm-toolsUpgrade libvirt-daemonUpgrade nbdkit-tar-pluginUpgrade libguestfs-javadocUpgrade libnbd-develUpgrade qemu-kvm-commonUpgrade nbdkit-vddk-pluginUpgrade qemu-kvm-device-usb-hostUpgrade lua-guestfsUpgrade libtpmsUpgrade perl-Sys-GuestfsUpgrade libvirt-daemon-driver-storage-coreUpgrade nbdkit-develUpgrade libvirt-nssUpgrade netcf-libsUpgrade nbdkit-tmpdisk-pluginUpgrade libvirt-daemon-driver-storage-rbdUpgrade swtpm-develUpgrade netcfUpgrade nbdkit-linuxdisk-pluginUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirt-wiresharkUpgrade libtpms-develUpgrade nbdkit-ssh-pluginUpgrade nbdkitUpgrade swtpmUpgrade qemu-kvm-coreUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-libsUpgrade libguestfs-java-develUpgrade swtpm-tools-pkcs11Upgrade libvirt-daemon-driver-storageUpgrade nbdkit-gzip-filterUpgrade libiscsiUpgrade nbdkit-nbd-pluginUpgrade libvirt-daemon-driver-storage-mpathUpgrade nbdkit-gzip-pluginUpgrade libvirt-daemon-config-networkUpgrade hivex-develUpgrade libvirt-develUpgrade virt-v2v-man-pages-ukUpgrade hivexUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-client-qemuUpgrade seabios-binUpgrade qemu-virtiofsdUpgrade nbdkit-bash-completionUpgrade python3-libvirtUpgrade sgabios-binUpgrade ruby-hivexUpgrade nbdfuseUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-interfaceUpgrade libguestfs-tools-cUpgrade libguestfs-man-pages-jaUpgrade libvirt-daemon-kvmUpgrade perl-Sys-VirtUpgrade netcf-develUpgrade libnbd-bash-completionUpgrade libguestfs-rsyncUpgrade libguestfs-gobjectUpgrade libvirt-daemon-driver-nwfilterUpgrade ruby-libguestfsUpgrade nbdkit-curl-pluginUpgrade libguestfs-javaUpgrade seavgabios-binUpgrade libvirt-docsUpgrade libvirt-daemon-config-nwfilterUpgrade perl-hivexUpgrade libguestfs-gfs2Upgrade libguestfsUpgrade libnbdUpgrade libguestfs-develUpgrade virt-dibUpgrade qemu-kvm-block-iscsiUpgrade nbdkit-example-pluginsUpgrade libvirt-dbusUpgrade libvirt-daemon-driver-secretUpgrade qemu-img | Feb 26, 2026 | Aug 30, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 19, 2024 |
| Suse | — | Upgrade qemu-vhost-user-gpuUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-block-nfsUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-toolsUpgrade qemu-microvmUpgrade qemu-audio-spiceUpgrade qemu-s390xUpgrade qemu-headlessUpgrade qemu-kvmUpgrade qemu-ppcUpgrade qemu-x86Upgrade qemu-audio-jackUpgrade qemu-SLOFUpgrade qemu-ipxeUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-ui-dbusUpgrade qemu-chardev-baumUpgrade qemu-extraUpgrade qemu-langUpgrade qemu-ivshmem-toolsUpgrade qemu-block-sshUpgrade qemu-block-rbdUpgrade qemu-vgabiosUpgrade qemuUpgrade qemu-hw-usb-smartcardUpgrade qemu-hw-display-qxlUpgrade qemu-audio-dbusUpgrade qemu-hw-usb-hostUpgrade qemu-sgabiosUpgrade qemu-guest-agentUpgrade qemu-audio-paUpgrade qemu-imgUpgrade qemu-ui-spice-appUpgrade qemu-ui-spice-coreUpgrade qemu-armUpgrade qemu-linux-userUpgrade qemu-ksmUpgrade qemu-block-dmgUpgrade qemu-spiceUpgrade qemu-accel-tcg-x86Upgrade qemu-block-curlUpgrade qemu-ui-cursesUpgrade qemu-block-iscsiUpgrade qemu-block-glusterUpgrade qemu-accel-qtestUpgrade qemu-seabiosUpgrade qemu-hw-usb-redirectUpgrade qemu-chardev-spiceUpgrade qemu-ui-openglUpgrade qemu-ui-gtkUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-audio-alsaUpgrade qemu-skibootUpgrade qemu-docUpgrade qemu-pr-helperUpgrade qemu-audio-pipewire | Dec 31, 2024 | Sep 19, 2024 |
| Ubuntu | — | Upgrade qemu-system-x86-microvm (Ubuntu Pro)Upgrade qemu-systemUpgrade qemu-system-sparc (Ubuntu Pro)Upgrade qemu-system-x86 (Ubuntu Pro)Upgrade qemu-system-mipsUpgrade qemu-common (Ubuntu Pro)Upgrade qemu (Ubuntu Pro)Upgrade qemu-system-modules-spiceUpgrade qemu-system-mips (Ubuntu Pro)Upgrade qemu-system-arm (Ubuntu Pro)Upgrade qemu-system-misc (Ubuntu Pro)Upgrade qemu-system-data (Ubuntu Pro)Upgrade qemu-system-modules-openglUpgrade qemu-system-x86-xenUpgrade qemu-system-s390xUpgrade qemu-system-ppc (Ubuntu Pro)Upgrade qemu-block-extra (Ubuntu Pro)Upgrade qemu-kvm (Ubuntu Pro)Upgrade qemu-system-s390x (Ubuntu Pro)Upgrade qemu-system-aarch64 (Ubuntu Pro)Upgrade qemu-user-static (Ubuntu Pro)Upgrade qemu-system-x86-microvmUpgrade qemu-utils (Ubuntu Pro)Upgrade qemu-system-armUpgrade qemu-system-xenUpgrade qemu-system-miscUpgrade qemu-system-dataUpgrade qemu-user (Ubuntu Pro)Upgrade qemu-keymaps (Ubuntu Pro)Upgrade qemu-guest-agent (Ubuntu Pro)Upgrade qemu-system-ppcUpgrade qemu-system (Ubuntu Pro)Upgrade qemu-system-gui (Ubuntu Pro)Upgrade qemu-system-common (Ubuntu Pro)Upgrade qemuUpgrade qemu-system-commonUpgrade qemu-system-x86-xen (Ubuntu Pro)Upgrade qemu-system-guiUpgrade qemu-user-binfmt (Ubuntu Pro)Upgrade qemu-system-riscvUpgrade qemu-system-x86Upgrade qemu-system-sparc | Jun 26, 2025 | Sep 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub