The MSI-X MMIO support in hw/pci/msix.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (NULL pointer dereference and QEMU process crash) by leveraging failure to define the .write method.
CVSS Details
- CVSS 3.0 Base Score: 6
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Feb 9, 2016 | Feb 3, 2016 |
| Freebsd | — | Upgrade qemu-user-staticUpgrade qemuUpgrade qemu-develUpgrade qemu-sbruno | Dec 10, 2025 | Jan 3, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Feb 4, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-common | Dec 4, 2019 | Oct 30, 2017 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-kvm-commonUpgrade qemu-kvmUpgrade qemu-img | Apr 16, 2020 | Oct 30, 2017 |
| Huawei Euleros 2_0_sp5 | — | Upgrade qemu-kvm-commonUpgrade qemu-imgUpgrade qemu-kvm | Nov 19, 2019 | Oct 30, 2017 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Oct 24, 2015 |
| Suse | — | Upgrade qemu-microvmUpgrade qemu-x86Upgrade qemu-hw-display-virtio-gpu-pciUpgrade xenUpgrade qemu-audio-paUpgrade qemu-ui-gtkUpgrade xen-doc-htmlUpgrade qemu-vgabiosUpgrade qemu-chardev-baumUpgrade qemu-hw-usb-redirectUpgrade qemu-ksmUpgrade xen-tools-domUUpgrade qemu-s390Upgrade qemu-toolsUpgrade qemu-ui-cursesUpgrade qemu-ppcUpgrade qemu-kvmUpgrade qemu-sgabiosUpgrade qemu-ui-spice-coreUpgrade qemu-block-curlUpgrade qemu-audio-alsaUpgrade qemu-hw-display-qxlUpgrade qemu-armUpgrade qemuUpgrade qemu-s390xUpgrade qemu-langUpgrade qemu-block-rbdUpgrade kvmUpgrade qemu-seabiosUpgrade qemu-guest-agentUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-block-iscsiUpgrade qemu-chardev-spiceUpgrade xen-kmp-defaultUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-audio-spiceUpgrade qemu-ipxeUpgrade xen-libsUpgrade xen-kmp-paeUpgrade qemu-audio-ossUpgrade xen-tools-xendomains-wait-diskUpgrade qemu-block-sshUpgrade qemu-hw-display-virtio-gpuUpgrade xen-toolsUpgrade xen-libs-32bitUpgrade qemu-skibootUpgrade qemu-ui-spice-appUpgrade xen-develUpgrade qemu-ui-opengl | Feb 3, 2016 | Feb 3, 2016 |
| Ubuntu | — | Upgrade qemu-system-sparcUpgrade qemu-system-x86Upgrade qemu-systemUpgrade qemu-system-miscUpgrade qemu-kvmUpgrade qemu-system-mipsUpgrade qemu-system-aarch64Upgrade qemu-system-ppcUpgrade qemu-system-arm | Feb 3, 2016 | Feb 3, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub