A NULL pointer dereference flaw was found in the am53c974 SCSI host bus adapter emulation of QEMU in versions before 6.0.0. This issue occurs while handling the 'Information Transfer' command. This flaw allows a privileged guest user to crash the QEMU process on the host, resulting in a denial of service. The highest threat from this vulnerability is to system availability.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemu | Aug 22, 2024 | May 28, 2021 |
| Debian | — | Upgrade qemu | Sep 6, 2022 | May 28, 2021 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Aug 16, 2022 | May 28, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade qemu-img | Jan 28, 2022 | May 28, 2021 |
| Suse | — | Upgrade qemu-microvmUpgrade qemu-block-iscsiUpgrade qemu-langUpgrade qemu-ksmUpgrade qemu-ipxeUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-audio-alsaUpgrade qemu-ui-spice-coreUpgrade qemu-vhost-user-gpuUpgrade qemu-s390Upgrade qemu-audio-sdlUpgrade qemu-seabiosUpgrade qemu-vgabiosUpgrade qemu-chardev-baumUpgrade qemu-testsuiteUpgrade qemu-block-curlUpgrade qemu-kvmUpgrade qemu-audio-spiceUpgrade qemu-ui-sdlUpgrade qemu-sgabiosUpgrade qemu-extraUpgrade qemu-hw-usb-smartcardUpgrade qemu-s390xUpgrade qemu-ui-gtkUpgrade qemu-chardev-spiceUpgrade qemu-block-sshUpgrade qemu-block-rbdUpgrade qemu-guest-agentUpgrade qemu-ivshmem-toolsUpgrade qemu-audio-ossUpgrade qemu-block-nfsUpgrade qemu-ui-spice-appUpgrade qemu-skibootUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-hw-display-qxlUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-x86Upgrade qemu-ppcUpgrade qemu-ui-openglUpgrade qemuUpgrade qemu-hw-usb-redirectUpgrade qemu-block-glusterUpgrade qemu-block-dmgUpgrade qemu-audio-paUpgrade qemu-armUpgrade qemu-toolsUpgrade qemu-ui-cursesUpgrade qemu-linux-userUpgrade qemu-hw-display-virtio-gpu | Aug 21, 2021 | May 28, 2021 |
| Ubuntu | — | Upgrade qemu-system-sparcUpgrade qemu-kvm (Ubuntu Pro)Upgrade qemu-system-aarch64 (Ubuntu Pro)Upgrade qemu-system-mipsUpgrade qemu-block-extra (Ubuntu Pro)Upgrade qemu-system-miscUpgrade qemu-common (Ubuntu Pro)Upgrade qemu-system-mips (Ubuntu Pro)Upgrade qemu-system-x86Upgrade qemu-guest-agent (Ubuntu Pro)Upgrade qemu-system-x86 (Ubuntu Pro)Upgrade qemu-utils (Ubuntu Pro)Upgrade qemu-system-common (Ubuntu Pro)Upgrade qemu-system-sparc (Ubuntu Pro)Upgrade qemu-system-arm (Ubuntu Pro)Upgrade qemu-system (Ubuntu Pro)Upgrade qemu-user (Ubuntu Pro)Upgrade qemu-system-s390x (Ubuntu Pro)Upgrade qemu-keymaps (Ubuntu Pro)Upgrade qemu-system-s390xUpgrade qemu-user-binfmt (Ubuntu Pro)Upgrade qemu-system-ppcUpgrade qemu-system-misc (Ubuntu Pro)Upgrade qemu-systemUpgrade qemu-system-ppc (Ubuntu Pro)Upgrade qemu-system-x86-microvmUpgrade qemu-system-x86-xenUpgrade qemu-user-static (Ubuntu Pro)Upgrade qemu (Ubuntu Pro)Upgrade qemu-system-arm | Jul 16, 2021 | May 28, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub