QEMU (aka Quick Emulator) built with the TPR optimization for 32-bit Windows guests support is vulnerable to a null pointer dereference flaw. It occurs while doing I/O port write operations via hmp interface. In that, 'current_cpu' remains null, which leads to the null pointer dereference. A user or process could use this flaw to crash the QEMU instance, resulting in DoS issue.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemuUpgrade qemu-kvm | Feb 9, 2016 | Feb 8, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Dec 29, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 18, 2015 |
| Suse | — | Upgrade xen-kmp-paeUpgrade qemu-block-iscsiUpgrade qemu-langUpgrade qemu-guest-agentUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-x86Upgrade qemu-vgabiosUpgrade qemu-s390Upgrade qemu-chardev-baumUpgrade qemu-block-curlUpgrade qemu-ui-gtkUpgrade qemu-ui-spice-coreUpgrade qemu-microvmUpgrade xenUpgrade qemu-ksmUpgrade qemu-ppcUpgrade qemu-seabiosUpgrade qemu-hw-usb-redirectUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-audio-paUpgrade xen-tools-domUUpgrade qemu-block-sshUpgrade qemu-kvmUpgrade qemu-audio-alsaUpgrade xen-kmp-defaultUpgrade kvmUpgrade qemu-sgabiosUpgrade qemu-hw-display-qxlUpgrade qemu-block-rbdUpgrade xen-doc-htmlUpgrade xen-develUpgrade xen-libsUpgrade qemu-audio-spiceUpgrade qemu-ui-openglUpgrade qemu-skibootUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-chardev-spiceUpgrade qemu-ui-cursesUpgrade qemu-s390xUpgrade qemu-toolsUpgrade xen-tools-xendomains-wait-diskUpgrade qemu-ipxeUpgrade qemu-armUpgrade qemuUpgrade qemu-hw-display-virtio-vgaUpgrade xen-toolsUpgrade xen-libs-32bitUpgrade qemu-audio-ossUpgrade qemu-ui-spice-app | Mar 28, 2016 | Mar 24, 2016 |
| Ubuntu | — | Upgrade qemu-kvmUpgrade qemu-system-miscUpgrade qemu-system-aarch64Upgrade qemu-system-armUpgrade qemu-systemUpgrade qemu-system-mipsUpgrade qemu-system-x86Upgrade qemu-system-sparcUpgrade qemu-system-ppc | Feb 3, 2016 | Feb 3, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub