The xhci_ring_fetch function in hw/usb/hcd-xhci.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) by leveraging failure to limit the number of link Transfer Request Blocks (TRB) to process.
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemu | Aug 22, 2024 | Nov 4, 2016 |
| Debian | — | Upgrade qemuUpgrade qemu-kvm | Mar 31, 2017 | Oct 25, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Nov 4, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvmUpgrade qemu-kvm-commonUpgrade qemu-img | Dec 4, 2019 | Nov 4, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-kvm-common | Apr 16, 2020 | Nov 4, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Oct 6, 2016 |
| Suse | — | Upgrade qemu-kvmUpgrade qemu-microvmUpgrade qemu-skibootUpgrade qemu-ui-gtkUpgrade xen-kmp-defaultUpgrade qemu-audio-alsaUpgrade qemu-audio-spiceUpgrade qemu-ui-cursesUpgrade qemu-x86Upgrade qemu-block-curlUpgrade xen-libs-32bitUpgrade qemu-s390Upgrade qemu-ui-spice-appUpgrade qemu-ksmUpgrade xen-tools-domUUpgrade xen-kmp-paeUpgrade qemu-block-iscsiUpgrade qemu-chardev-baumUpgrade xen-libsUpgrade qemu-ipxeUpgrade xen-doc-htmlUpgrade qemu-seabiosUpgrade qemu-sgabiosUpgrade qemu-ui-openglUpgrade qemu-s390xUpgrade xen-toolsUpgrade qemu-hw-usb-redirectUpgrade qemu-armUpgrade qemu-vgabiosUpgrade qemu-ui-spice-coreUpgrade qemu-guest-agentUpgrade kvmUpgrade qemu-hw-display-qxlUpgrade qemu-audio-paUpgrade qemu-chardev-spiceUpgrade qemu-block-sshUpgrade qemu-hw-display-virtio-gpu-pciUpgrade xenUpgrade qemu-audio-ossUpgrade qemuUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-block-rbdUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-ppcUpgrade qemu-toolsUpgrade xen-develUpgrade qemu-lang | Nov 23, 2016 | Nov 4, 2016 |
| Ubuntu | — | Upgrade qemu-system-aarch64Upgrade qemu-system-s390xUpgrade qemu-system-ppcUpgrade qemu-system-mipsUpgrade qemu-system-miscUpgrade qemu-system-armUpgrade qemu-system-x86Upgrade qemu-system-sparcUpgrade qemu-kvmUpgrade qemu-system | Nov 9, 2016 | Nov 4, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub