The (1) fw_cfg_write and (2) fw_cfg_read functions in hw/nvram/fw_cfg.c in QEMU before 2.4, when built with the Firmware Configuration device emulation support, allow guest OS users with the CAP_SYS_RAWIO privilege to cause a denial of service (out-of-bounds read or write access and process crash) or possibly execute arbitrary code via an invalid current entry value in a firmware configuration.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade libcacardUpgrade libcacard-toolsUpgrade qemu-kvm-toolsUpgrade qemu-kvm-commonUpgrade qemu-kvmUpgrade libcacard-develUpgrade qemu-guest-agentUpgrade qemu-img | Jul 6, 2016 | Feb 1, 2016 |
| Debian | — | Upgrade qemu-kvmUpgrade qemu | Apr 7, 2016 | Feb 8, 2016 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | May 10, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Apr 7, 2016 |
| Oracle_linux | — | Upgrade qemu-guest-agentUpgrade libcacard-toolsUpgrade libcacardUpgrade qemu-kvmUpgrade qemu-kvm-toolsUpgrade qemu-imgUpgrade qemu-kvm-commonUpgrade libcacard-devel | May 17, 2016 | Apr 7, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 5, 2016 |
| Suse | — | Upgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-sgabiosUpgrade xen-kmp-traceUpgrade xen-toolsUpgrade qemu-block-sshUpgrade qemu-toolsUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-hw-display-qxlUpgrade qemuUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-audio-paUpgrade qemu-ui-spice-coreUpgrade xen-tools-xendomains-wait-diskUpgrade qemu-hw-usb-redirectUpgrade qemu-block-rbdUpgrade xen-develUpgrade qemu-ppcUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-langUpgrade qemu-audio-ossUpgrade kvmUpgrade qemu-guest-agentUpgrade qemu-armUpgrade qemu-ui-openglUpgrade xen-kmp-defaultUpgrade qemu-ui-cursesUpgrade qemu-chardev-spiceUpgrade qemu-ui-spice-appUpgrade qemu-x86Upgrade qemu-seabiosUpgrade qemu-audio-spiceUpgrade xen-doc-htmlUpgrade xen-kmp-paeUpgrade qemu-microvmUpgrade qemu-ui-gtkUpgrade xenUpgrade qemu-audio-alsaUpgrade qemu-block-iscsiUpgrade xen-libs-32bitUpgrade qemu-block-curlUpgrade qemu-skibootUpgrade qemu-s390xUpgrade qemu-vgabiosUpgrade qemu-kvmUpgrade xen-tools-domUUpgrade qemu-chardev-baumUpgrade xen-doc-pdfUpgrade xen-libsUpgrade qemu-s390Upgrade qemu-ksmUpgrade qemu-ipxe | Mar 28, 2016 | Mar 24, 2016 |
| Ubuntu | — | Upgrade qemu-systemUpgrade qemu-system-mipsUpgrade qemu-system-ppcUpgrade qemu-system-miscUpgrade qemu-system-x86Upgrade qemu-system-aarch64Upgrade qemu-system-sparcUpgrade qemu-system-armUpgrade qemu-kvm | Apr 7, 2016 | Feb 3, 2016 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub