QEMU (aka Quick Emulator) built with the TPR optimization for 32-bit Windows guests support is vulnerable to a null pointer dereference flaw. It occurs while doing I/O port write operations via hmp interface. In that, 'current_cpu' remains null, which leads to the null pointer dereference. A user or process could use this flaw to crash the QEMU instance, resulting in DoS issue.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemuUpgrade qemu-kvm | Feb 9, 2016 | Feb 8, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Dec 29, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 18, 2015 |
| Suse | — | Upgrade qemu-ui-gtkUpgrade qemu-s390Upgrade qemu-block-iscsiUpgrade qemu-block-curlUpgrade xen-kmp-paeUpgrade qemu-ppcUpgrade qemu-audio-paUpgrade qemu-audio-alsaUpgrade qemu-ksmUpgrade qemu-seabiosUpgrade qemu-block-sshUpgrade qemu-microvmUpgrade xenUpgrade qemu-hw-usb-redirectUpgrade qemu-ui-spice-coreUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-langUpgrade qemu-guest-agentUpgrade qemu-x86Upgrade qemu-kvmUpgrade qemu-vgabiosUpgrade xen-tools-domuUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-chardev-baumUpgrade xen-develUpgrade qemu-ui-cursesUpgrade xen-libsUpgrade xen-libs-32bitUpgrade kvmUpgrade qemu-hw-display-qxlUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-audio-ossUpgrade xen-doc-htmlUpgrade xen-toolsUpgrade qemu-toolsUpgrade qemu-audio-spiceUpgrade qemu-block-rbdUpgrade qemu-ipxeUpgrade xen-kmp-defaultUpgrade qemu-armUpgrade qemu-s390xUpgrade qemu-ui-openglUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-skibootUpgrade xen-tools-xendomains-wait-diskUpgrade qemu-sgabiosUpgrade qemu-ui-spice-appUpgrade qemu-chardev-spiceUpgrade qemu | Mar 28, 2016 | Mar 24, 2016 |
| Ubuntu | — | Upgrade qemu-system-x86Upgrade qemu-system-mipsUpgrade qemu-system-sparcUpgrade qemu-system-aarch64Upgrade qemu-systemUpgrade qemu-system-armUpgrade qemu-system-ppcUpgrade qemu-kvmUpgrade qemu-system-misc | Feb 3, 2016 | Feb 3, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub