Use-after-free vulnerability in hw/ide/ahci.c in QEMU, when built with IDE AHCI Emulation support, allows guest OS users to cause a denial of service (instance crash) or possibly execute arbitrary code via an invalid AHCI Native Command Queuing (NCQ) AIO command.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu-kvmUpgrade qemu | Feb 9, 2016 | Feb 8, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Apr 11, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-imgUpgrade qemu-kvm-commonUpgrade qemu-kvm | Dec 4, 2019 | Apr 12, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-common | Apr 16, 2020 | Apr 12, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 8, 2016 |
| Suse | — | Upgrade qemu-audio-paUpgrade qemuUpgrade qemu-sgabiosUpgrade qemu-s390Upgrade xen-tools-domUUpgrade xen-doc-htmlUpgrade qemu-kvmUpgrade xen-kmp-defaultUpgrade qemu-hw-display-qxlUpgrade qemu-vgabiosUpgrade qemu-hw-display-virtio-vgaUpgrade xenUpgrade qemu-microvmUpgrade qemu-audio-ossUpgrade kvmUpgrade qemu-ui-cursesUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-x86Upgrade qemu-armUpgrade qemu-ui-gtkUpgrade qemu-toolsUpgrade xen-tools-xendomains-wait-diskUpgrade qemu-langUpgrade qemu-ui-spice-appUpgrade qemu-hw-display-virtio-gpu-pciUpgrade xen-kmp-paeUpgrade qemu-ipxeUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-block-iscsiUpgrade xen-doc-pdfUpgrade xen-libsUpgrade qemu-ui-openglUpgrade qemu-audio-spiceUpgrade qemu-block-curlUpgrade qemu-guest-agentUpgrade qemu-ppcUpgrade qemu-chardev-spiceUpgrade qemu-hw-usb-redirectUpgrade qemu-audio-alsaUpgrade qemu-block-rbdUpgrade qemu-seabiosUpgrade qemu-skibootUpgrade qemu-s390xUpgrade xen-libs-32bitUpgrade xen-develUpgrade qemu-chardev-baumUpgrade qemu-block-sshUpgrade qemu-ksmUpgrade xen-toolsUpgrade qemu-ui-spice-core | Mar 28, 2016 | Mar 24, 2016 |
| Ubuntu | — | Upgrade qemu-system-mipsUpgrade qemu-system-x86Upgrade qemu-system-aarch64Upgrade qemu-system-miscUpgrade qemu-kvmUpgrade qemu-system-sparcUpgrade qemu-system-ppcUpgrade qemu-system-armUpgrade qemu-system | Feb 3, 2016 | Feb 3, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub