Use-after-free vulnerability in hw/ide/ahci.c in QEMU, when built with IDE AHCI Emulation support, allows guest OS users to cause a denial of service (instance crash) or possibly execute arbitrary code via an invalid AHCI Native Command Queuing (NCQ) AIO command.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemuUpgrade qemu-kvm | Feb 9, 2016 | Feb 8, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Apr 11, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvmUpgrade qemu-kvm-commonUpgrade qemu-img | Dec 4, 2019 | Apr 12, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-kvm-commonUpgrade qemu-imgUpgrade qemu-kvm | Apr 16, 2020 | Apr 12, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 8, 2016 |
| Suse | — | Upgrade xen-tools-domuUpgrade qemu-ui-spice-coreUpgrade xen-libs-32bitUpgrade xen-kmp-paeUpgrade qemu-skibootUpgrade qemu-block-sshUpgrade xen-doc-pdfUpgrade qemu-armUpgrade qemu-langUpgrade xen-tools-xendomains-wait-diskUpgrade qemu-ui-spice-appUpgrade qemu-ipxeUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-chardev-spiceUpgrade qemu-audio-spiceUpgrade xen-develUpgrade xen-toolsUpgrade qemu-chardev-baumUpgrade qemu-ksmUpgrade xen-libsUpgrade qemu-block-rbdUpgrade qemu-block-curlUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-block-iscsiUpgrade qemu-toolsUpgrade qemu-ui-gtkUpgrade qemu-hw-usb-redirectUpgrade qemu-guest-agentUpgrade qemu-ppcUpgrade qemu-ui-openglUpgrade qemu-seabiosUpgrade qemu-s390xUpgrade qemu-audio-alsaUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-vgabiosUpgrade qemu-sgabiosUpgrade xen-kmp-defaultUpgrade qemu-hw-display-qxlUpgrade qemu-ui-cursesUpgrade qemuUpgrade qemu-microvmUpgrade xenUpgrade kvmUpgrade qemu-kvmUpgrade qemu-s390Upgrade qemu-audio-paUpgrade qemu-audio-ossUpgrade xen-doc-htmlUpgrade qemu-x86Upgrade qemu-hw-display-virtio-gpu | Mar 28, 2016 | Mar 24, 2016 |
| Ubuntu | — | Upgrade qemu-system-x86Upgrade qemu-system-miscUpgrade qemu-kvmUpgrade qemu-system-aarch64Upgrade qemu-system-sparcUpgrade qemu-system-mipsUpgrade qemu-system-ppcUpgrade qemu-system-armUpgrade qemu-system | Feb 3, 2016 | Feb 3, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub