The (1) fw_cfg_write and (2) fw_cfg_read functions in hw/nvram/fw_cfg.c in QEMU before 2.4, when built with the Firmware Configuration device emulation support, allow guest OS users with the CAP_SYS_RAWIO privilege to cause a denial of service (out-of-bounds read or write access and process crash) or possibly execute arbitrary code via an invalid current entry value in a firmware configuration.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade libcacard-toolsUpgrade libcacardUpgrade qemu-kvm-toolsUpgrade qemu-kvm-commonUpgrade libcacard-develUpgrade qemu-imgUpgrade qemu-guest-agentUpgrade qemu-kvm | Jul 6, 2016 | Feb 1, 2016 |
| Debian | — | Upgrade qemuUpgrade qemu-kvm | Apr 7, 2016 | Feb 8, 2016 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | May 10, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Apr 7, 2016 |
| Oracle_linux | — | Upgrade qemu-imgUpgrade qemu-kvm-commonUpgrade libcacard-develUpgrade qemu-kvmUpgrade qemu-guest-agentUpgrade libcacardUpgrade qemu-kvm-toolsUpgrade libcacard-tools | May 17, 2016 | Apr 7, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 5, 2016 |
| Suse | — | Upgrade qemu-block-rbdUpgrade qemu-langUpgrade xen-develUpgrade qemu-audio-paUpgrade qemu-toolsUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-guest-agentUpgrade qemu-ui-spice-coreUpgrade qemu-hw-display-virtio-vgaUpgrade xen-tools-xendomains-wait-diskUpgrade kvmUpgrade xen-toolsUpgrade qemu-hw-usb-redirectUpgrade qemu-block-sshUpgrade qemu-ppcUpgrade xen-kmp-traceUpgrade qemu-hw-display-qxlUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-audio-ossUpgrade qemuUpgrade qemu-ui-openglUpgrade qemu-armUpgrade qemu-sgabiosUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-ipxeUpgrade xen-doc-htmlUpgrade qemu-ui-cursesUpgrade qemu-block-iscsiUpgrade qemu-chardev-baumUpgrade xen-libs-32bitUpgrade xenUpgrade qemu-audio-spiceUpgrade xen-kmp-paeUpgrade qemu-seabiosUpgrade qemu-x86Upgrade qemu-skibootUpgrade xen-tools-domUUpgrade qemu-s390xUpgrade qemu-ksmUpgrade xen-libsUpgrade qemu-ui-spice-appUpgrade qemu-microvmUpgrade qemu-chardev-spiceUpgrade qemu-vgabiosUpgrade xen-kmp-defaultUpgrade qemu-kvmUpgrade qemu-audio-alsaUpgrade qemu-ui-gtkUpgrade xen-doc-pdfUpgrade qemu-block-curlUpgrade qemu-s390 | Mar 28, 2016 | Mar 24, 2016 |
| Ubuntu | — | Upgrade qemu-system-sparcUpgrade qemu-kvmUpgrade qemu-system-armUpgrade qemu-system-miscUpgrade qemu-system-x86Upgrade qemu-system-mipsUpgrade qemu-system-ppcUpgrade qemu-systemUpgrade qemu-system-aarch64 | Apr 7, 2016 | Feb 3, 2016 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub