The pit_ioport_read in i8254.c in the Linux kernel before 2.6.33 and QEMU before 2.3.1 does not distinguish between read lengths and write lengths, which might allow guest OS users to execute arbitrary code on the host OS by triggering use of an invalid index.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade libcacardUpgrade qemu-kvmUpgrade libcacard-develUpgrade qemu-kvm-toolsUpgrade qemu-kvm-commonUpgrade libcacard-toolsUpgrade qemu-img | Dec 1, 2016 | Aug 31, 2015 |
| Debian | — | Upgrade qemuUpgrade xen | Jul 30, 2024 | Aug 31, 2015 |
| Freebsd | — | Upgrade qemu-sbrunoUpgrade qemu-user-staticUpgrade qemu-develUpgrade qemu | Dec 10, 2025 | Jan 1, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Aug 31, 2015 |
| Oracle_linux | — | Upgrade libcacardUpgrade libcacard-develUpgrade qemu-kvmUpgrade libcacard-toolsUpgrade qemu-kvm-commonUpgrade qemu-kvm-toolsUpgrade qemu-img | Oct 16, 2024 | Aug 31, 2015 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jun 16, 2015 |
| Suse | — | Upgrade qemu-ipxeUpgrade qemu-kvmUpgrade qemu-s390Upgrade qemu-seabiosUpgrade kvmUpgrade qemu-block-rbdUpgrade qemu-ppcUpgrade qemu-vgabiosUpgrade qemu-block-curlUpgrade qemu-x86Upgrade qemu-toolsUpgrade qemu-langUpgrade qemu-sgabiosUpgrade qemuUpgrade qemu-guest-agent | Jun 13, 2016 | Aug 31, 2015 |
| Ubuntu | — | Upgrade qemu-system-sparcUpgrade qemu-system-armUpgrade qemu-system-x86Upgrade qemu-system-miscUpgrade qemu-system-ppcUpgrade qemu-systemUpgrade qemu-system-aarch64Upgrade qemu-system-mips | Nov 8, 2024 | Aug 31, 2015 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub