Use-after-free vulnerability in hw/ide/ahci.c in QEMU, when built with IDE AHCI Emulation support, allows guest OS users to cause a denial of service (instance crash) or possibly execute arbitrary code via an invalid AHCI Native Command Queuing (NCQ) AIO command.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemuUpgrade qemu-kvm | Feb 9, 2016 | Feb 8, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Apr 11, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-common | Dec 4, 2019 | Apr 12, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-imgUpgrade qemu-kvm-commonUpgrade qemu-kvm | Apr 16, 2020 | Apr 12, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Jan 8, 2016 |
| Suse | — | Upgrade qemu-langUpgrade qemu-hw-usb-redirectUpgrade qemu-ppcUpgrade qemu-block-curlUpgrade qemu-ui-openglUpgrade qemu-block-iscsiUpgrade qemu-audio-spiceUpgrade qemu-ksmUpgrade qemu-ui-spice-coreUpgrade qemu-guest-agentUpgrade qemu-hw-display-virtio-gpu-pciUpgrade xen-doc-pdfUpgrade qemu-ui-gtkUpgrade qemu-ui-spice-appUpgrade qemu-chardev-baumUpgrade qemu-armUpgrade xen-toolsUpgrade xen-tools-xendomains-wait-diskUpgrade qemu-seabiosUpgrade qemu-skibootUpgrade xen-develUpgrade qemu-toolsUpgrade qemu-audio-alsaUpgrade xen-kmp-paeUpgrade qemu-block-sshUpgrade qemu-s390xUpgrade xen-libsUpgrade qemu-block-rbdUpgrade xen-libs-32bitUpgrade qemu-chardev-spiceUpgrade qemu-ipxeUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-sgabiosUpgrade qemu-microvmUpgrade qemu-s390Upgrade qemu-audio-paUpgrade qemuUpgrade qemu-x86Upgrade kvmUpgrade qemu-ui-cursesUpgrade xen-tools-domUUpgrade xen-kmp-defaultUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-kvmUpgrade qemu-vgabiosUpgrade xen-doc-htmlUpgrade qemu-audio-ossUpgrade qemu-hw-display-qxlUpgrade xen | Mar 28, 2016 | Mar 24, 2016 |
| Ubuntu | — | Upgrade qemu-systemUpgrade qemu-system-ppcUpgrade qemu-system-armUpgrade qemu-system-mipsUpgrade qemu-system-x86Upgrade qemu-system-aarch64Upgrade qemu-system-miscUpgrade qemu-kvmUpgrade qemu-system-sparc | Feb 3, 2016 | Feb 3, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub