QEMU (aka Quick Emulator) built with the TPR optimization for 32-bit Windows guests support is vulnerable to a null pointer dereference flaw. It occurs while doing I/O port write operations via hmp interface. In that, 'current_cpu' remains null, which leads to the null pointer dereference. A user or process could use this flaw to crash the QEMU instance, resulting in DoS issue.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu-kvmUpgrade qemu | Feb 9, 2016 | Feb 8, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Dec 29, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Dec 18, 2015 |
| Suse | — | Upgrade xen-libs-32bitUpgrade xen-develUpgrade qemu-audio-spiceUpgrade xen-libsUpgrade qemu-audio-ossUpgrade qemu-block-rbdUpgrade qemu-hw-display-qxlUpgrade xen-kmp-defaultUpgrade qemu-ui-openglUpgrade qemu-toolsUpgrade qemu-sgabiosUpgrade qemu-chardev-spiceUpgrade xen-doc-htmlUpgrade qemu-armUpgrade qemu-ui-cursesUpgrade xen-toolsUpgrade qemu-ui-spice-appUpgrade qemu-ipxeUpgrade qemuUpgrade qemu-hw-display-virtio-vgaUpgrade xen-tools-xendomains-wait-diskUpgrade qemu-s390xUpgrade kvmUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-skibootUpgrade qemu-s390Upgrade xenUpgrade qemu-langUpgrade qemu-ppcUpgrade qemu-vgabiosUpgrade qemu-microvmUpgrade qemu-chardev-baumUpgrade qemu-guest-agentUpgrade qemu-block-iscsiUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-x86Upgrade qemu-audio-alsaUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-hw-usb-redirectUpgrade xen-tools-domuUpgrade xen-kmp-paeUpgrade qemu-ui-spice-coreUpgrade qemu-kvmUpgrade qemu-block-sshUpgrade qemu-block-curlUpgrade qemu-audio-paUpgrade qemu-seabiosUpgrade qemu-ksmUpgrade qemu-ui-gtk | Mar 28, 2016 | Mar 24, 2016 |
| Ubuntu | — | Upgrade qemu-system-mipsUpgrade qemu-system-armUpgrade qemu-system-ppcUpgrade qemu-system-x86Upgrade qemu-system-aarch64Upgrade qemu-system-sparcUpgrade qemu-systemUpgrade qemu-system-miscUpgrade qemu-kvm | Feb 3, 2016 | Feb 3, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub