Use-after-free vulnerability in hw/ide/ahci.c in QEMU, when built with IDE AHCI Emulation support, allows guest OS users to cause a denial of service (instance crash) or possibly execute arbitrary code via an invalid AHCI Native Command Queuing (NCQ) AIO command.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemuUpgrade qemu-kvm | Feb 9, 2016 | Feb 8, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Apr 11, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-common | Dec 4, 2019 | Apr 12, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-common | Apr 16, 2020 | Apr 12, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 8, 2016 |
| Suse | — | Upgrade qemu-toolsUpgrade qemu-chardev-spiceUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade xen-doc-pdfUpgrade qemu-block-iscsiUpgrade qemu-skibootUpgrade qemu-block-rbdUpgrade qemu-audio-alsaUpgrade xen-kmp-paeUpgrade qemu-ui-spice-coreUpgrade qemu-seabiosUpgrade xen-tools-domuUpgrade qemu-s390xUpgrade qemu-guest-agentUpgrade qemu-ppcUpgrade qemu-ui-gtkUpgrade qemu-hw-usb-redirectUpgrade qemu-block-curlUpgrade xen-libsUpgrade qemu-ui-openglUpgrade qemu-audio-spiceUpgrade qemu-ksmUpgrade xen-libs-32bitUpgrade qemu-ipxeUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-chardev-baumUpgrade qemu-block-sshUpgrade xen-toolsUpgrade xen-develUpgrade xen-tools-xendomains-wait-diskUpgrade qemu-ui-spice-appUpgrade qemu-armUpgrade qemu-langUpgrade xenUpgrade qemu-s390Upgrade qemuUpgrade kvmUpgrade qemu-sgabiosUpgrade qemu-audio-paUpgrade qemu-audio-ossUpgrade xen-doc-htmlUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-x86Upgrade qemu-ui-cursesUpgrade xen-kmp-defaultUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-vgabiosUpgrade qemu-kvmUpgrade qemu-hw-display-qxlUpgrade qemu-microvm | Mar 28, 2016 | Mar 24, 2016 |
| Ubuntu | — | Upgrade qemu-system-armUpgrade qemu-systemUpgrade qemu-system-ppcUpgrade qemu-system-x86Upgrade qemu-system-mipsUpgrade qemu-system-aarch64Upgrade qemu-system-miscUpgrade qemu-kvmUpgrade qemu-system-sparc | Feb 3, 2016 | Feb 3, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub