QEMU 5.0.0 has a use-after-free in hw/usb/hcd-xhci.c because the usb_packet_map return value is not checked.
CVSS Details
- CVSS 3.1 Base Score: 3.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemu | Aug 22, 2024 | Sep 25, 2020 |
| Debian | — | Upgrade qemu | Feb 19, 2021 | Sep 25, 2020 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Dec 15, 2020 |
| Oracle_linux | — | Upgrade qemu-block-iscsiUpgrade qemu-system-aarch64-coreUpgrade qemu-kvm-coreUpgrade qemu-kvmUpgrade qemu-system-x86Upgrade qemu-imgUpgrade qemu-system-x86-coreUpgrade qemu-system-aarch64Upgrade qemu-block-glusterUpgrade ivshmem-toolsUpgrade qemu-block-rbdUpgrade qemuUpgrade qemu-common | Feb 9, 2021 | Jun 24, 2020 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 25, 2020 |
| Suse | — | Upgrade qemu-sgabiosUpgrade kvmUpgrade qemu-toolsUpgrade qemu-armUpgrade qemu-audio-ossUpgrade qemu-ipxeUpgrade qemu-guest-agentUpgrade qemuUpgrade qemu-block-nfsUpgrade qemu-ppcUpgrade qemu-x86Upgrade qemu-linux-userUpgrade qemu-block-rbdUpgrade qemu-block-glusterUpgrade qemu-ui-sdlUpgrade qemu-ui-spice-appUpgrade qemu-ksmUpgrade qemu-block-dmgUpgrade qemu-testsuiteUpgrade qemu-audio-alsaUpgrade qemu-block-iscsiUpgrade qemu-block-sshUpgrade qemu-extraUpgrade qemu-langUpgrade qemu-s390Upgrade qemu-block-curlUpgrade qemu-ui-cursesUpgrade qemu-kvmUpgrade qemu-microvmUpgrade qemu-vhost-user-gpuUpgrade qemu-audio-sdlUpgrade qemu-vgabiosUpgrade qemu-ui-gtkUpgrade qemu-audio-paUpgrade qemu-seabios | Apr 17, 2021 | Sep 25, 2020 |
| Ubuntu | — | Upgrade qemu-system-x86 (Ubuntu Pro)Upgrade qemu-system-common (Ubuntu Pro)Upgrade qemu-system-x86-xenUpgrade qemu-system-miscUpgrade qemu-system-s390xUpgrade qemu-system-aarch64 (Ubuntu Pro)Upgrade qemu-common (Ubuntu Pro)Upgrade qemu-kvm (Ubuntu Pro)Upgrade qemu-system-ppc (Ubuntu Pro)Upgrade qemu-system-mipsUpgrade qemu-systemUpgrade qemu-system-x86-microvmUpgrade qemu-utils (Ubuntu Pro)Upgrade qemu-system-sparc (Ubuntu Pro)Upgrade qemu-system-mips (Ubuntu Pro)Upgrade qemu-system-arm (Ubuntu Pro)Upgrade qemu-system-ppcUpgrade qemu-user-static (Ubuntu Pro)Upgrade qemu-guest-agent (Ubuntu Pro)Upgrade qemu-system (Ubuntu Pro)Upgrade qemu-system-armUpgrade qemu-user (Ubuntu Pro)Upgrade qemu-system-x86Upgrade qemu-system-aarch64Upgrade qemu (Ubuntu Pro)Upgrade qemu-system-sparcUpgrade qemu-keymaps (Ubuntu Pro)Upgrade qemu-system-misc (Ubuntu Pro) | Dec 1, 2020 | Sep 25, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub