Memory leak in the v9fs_link function in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (memory consumption) via vectors involving a reference to the source fid object.
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemu | Aug 22, 2024 | Dec 9, 2016 |
| Debian | — | Upgrade qemu-kvmUpgrade qemu | Mar 31, 2017 | Nov 3, 2016 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Oct 30, 2017 | Dec 9, 2016 |
| Huawei Euleros 2_0_sp2 | — | Upgrade qemu-kvm-commonUpgrade qemu-kvmUpgrade qemu-img | Dec 4, 2019 | Dec 9, 2016 |
| Huawei Euleros 2_0_sp3 | — | Upgrade qemu-kvmUpgrade qemu-imgUpgrade qemu-kvm-common | Apr 16, 2020 | Dec 9, 2016 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Oct 12, 2016 |
| Suse | — | Upgrade qemu-seabiosUpgrade qemu-block-rbdUpgrade qemu-block-sshUpgrade qemu-ui-gtkUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-ui-spice-coreUpgrade qemu-audio-paUpgrade qemu-ksmUpgrade qemu-ipxeUpgrade qemu-chardev-spiceUpgrade qemu-skibootUpgrade qemu-guest-agentUpgrade qemu-ppcUpgrade qemu-ui-spice-appUpgrade qemu-audio-spiceUpgrade qemu-block-iscsiUpgrade qemu-audio-alsaUpgrade qemu-armUpgrade qemu-langUpgrade qemu-hw-usb-redirectUpgrade qemu-s390xUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-toolsUpgrade qemu-ui-openglUpgrade qemu-block-curlUpgrade qemu-chardev-baumUpgrade qemu-sgabiosUpgrade qemuUpgrade qemu-x86Upgrade qemu-hw-display-virtio-gpuUpgrade qemu-kvmUpgrade qemu-hw-display-virtio-vgaUpgrade kvmUpgrade qemu-ui-cursesUpgrade qemu-vgabiosUpgrade qemu-audio-ossUpgrade qemu-s390Upgrade qemu-microvmUpgrade qemu-hw-display-qxl | Nov 23, 2016 | Nov 22, 2016 |
| Ubuntu | — | Upgrade qemu-system-sparcUpgrade qemu-system-aarch64Upgrade qemu-kvmUpgrade qemu-system-armUpgrade qemu-system-miscUpgrade qemu-system-mipsUpgrade qemu-system-ppcUpgrade qemu-systemUpgrade qemu-system-x86Upgrade qemu-system-s390x | Nov 9, 2016 | Nov 9, 2016 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub