A flaw was found in the USB redirector device (usb-redir) of QEMU. Small USB packets are combined into a single, large transfer request, to reduce the overhead and improve performance. The combined size of the bulk transfer is used to dynamically allocate a variable length array (VLA) on the stack without proper validation. Since the total size is not bounded, a malicious guest could use this flaw to influence the array length and cause the QEMU process to perform an excessive allocation on the stack, resulting in a denial of service.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemu | Aug 22, 2024 | May 26, 2021 |
| Amazon Linux Ami 2 | — | Upgrade qemu-debuginfoUpgrade qemu-block-dmgUpgrade qemu-system-aarch64Upgrade qemu-block-nfsUpgrade qemu-audio-sdlUpgrade qemu-user-staticUpgrade qemu-system-x86Upgrade qemu-user-binfmtUpgrade qemu-ui-sdlUpgrade qemu-ui-cursesUpgrade qemu-kvm-coreUpgrade qemu-commonUpgrade qemu-imgUpgrade qemuUpgrade qemu-system-aarch64-coreUpgrade qemu-audio-alsaUpgrade qemu-block-curlUpgrade qemu-guest-agentUpgrade qemu-audio-ossUpgrade qemu-block-iscsiUpgrade qemu-kvmUpgrade ivshmem-toolsUpgrade qemu-system-x86-coreUpgrade qemu-userUpgrade qemu-block-rbdUpgrade qemu-audio-paUpgrade qemu-ui-gtkUpgrade qemu-block-ssh | Jun 6, 2023 | May 26, 2021 |
| Debian | — | Upgrade qemu | Sep 7, 2021 | May 26, 2021 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Aug 16, 2022 | May 26, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade qemu-img | Jan 28, 2022 | May 26, 2021 |
| Oracle_linux | — | Upgrade nbdkit-ssh-pluginUpgrade nbdkit-vddk-pluginUpgrade perl-Sys-VirtUpgrade libvirt-daemon-driver-nwfilterUpgrade libiscsi-develUpgrade libvirt-daemon-driver-storage-rbdUpgrade nbdkit-xz-filterUpgrade libvirt-daemonUpgrade python3-libguestfsUpgrade nbdfuseUpgrade python3-hivexUpgrade qemu-kvm-block-iscsiUpgrade sgabiosUpgrade libguestfs-javadocUpgrade qemu-block-glusterUpgrade qemu-block-iscsiUpgrade qemu-commonUpgrade supermin-develUpgrade libguestfs-rescueUpgrade libvirt-daemon-driver-interfaceUpgrade libguestfs-gfs2Upgrade netcf-libsUpgrade libguestfs-java-develUpgrade hivex-develUpgrade libvirt-dbusUpgrade python3-libvirtUpgrade qemuUpgrade qemu-guest-agentUpgrade qemu-block-rbdUpgrade libiscsi-utilsUpgrade nbdkitUpgrade libvirt-clientUpgrade libvirt-daemon-config-networkUpgrade nbdkit-bash-completionUpgrade libvirt-libsUpgrade libvirt-daemon-driver-storageUpgrade qemu-kvm-block-curlUpgrade superminUpgrade libvirt-daemon-kvmUpgrade virt-dibUpgrade libvirt-develUpgrade qemu-kvm-commonUpgrade libguestfs-develUpgrade libvirt-adminUpgrade ivshmem-toolsUpgrade sgabios-binUpgrade libguestfs-toolsUpgrade seabios-binUpgrade libnbd-develUpgrade libvirt-daemon-driver-secretUpgrade nbdkit-example-pluginsUpgrade libguestfs-bash-completionUpgrade virt-v2vUpgrade libvirt-daemon-driver-storage-mpathUpgrade libguestfs-xfsUpgrade netcfUpgrade libvirt-daemon-driver-storage-scsiUpgrade libguestfs-man-pages-ukUpgrade libguestfs-rsyncUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade libnbdUpgrade libguestfs-tools-cUpgrade seabiosUpgrade qemu-kvm-block-sshUpgrade libvirt-daemon-driver-networkUpgrade libvirt-docsUpgrade qemu-kvmUpgrade libvirt-daemon-driver-storage-logicalUpgrade libguestfs-javaUpgrade libguestfs-gobject-develUpgrade ruby-libguestfsUpgrade qemu-system-aarch64-coreUpgrade qemu-kvm-coreUpgrade qemu-kvm-block-glusterUpgrade qemu-system-x86Upgrade libvirt-lock-sanlockUpgrade qemu-system-x86-coreUpgrade libvirt-daemon-config-nwfilterUpgrade libguestfs-inspect-iconsUpgrade libvirt-daemon-driver-storage-coreUpgrade libguestfs-gobjectUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-qemuUpgrade ruby-hivexUpgrade qemu-system-aarch64Upgrade perl-hivexUpgrade libvirt-daemon-driver-storage-glusterUpgrade qemu-imgUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libvirtUpgrade seavgabios-binUpgrade python3-libnbdUpgrade libvirt-nssUpgrade libvirt-daemon-driver-nodedevUpgrade nbdkit-serverUpgrade nbdkit-python-pluginUpgrade nbdkit-develUpgrade libguestfs-winsupportUpgrade hivexUpgrade qemu-kvm-block-rbdUpgrade libvirt-bash-completionUpgrade libguestfsUpgrade nbdkit-linuxdisk-pluginUpgrade nbdkit-basic-pluginsUpgrade lua-guestfsUpgrade libiscsiUpgrade libguestfs-man-pages-jaUpgrade libguestfs-benchmarkingUpgrade netcf-develUpgrade nbdkit-gzip-pluginUpgrade nbdkit-basic-filtersUpgrade perl-Sys-GuestfsUpgrade nbdkit-curl-plugin | Aug 17, 2021 | Apr 30, 2021 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 26, 2021 |
| Suse | — | Upgrade qemu-extraUpgrade xen-kmp-paeUpgrade qemu-ui-sdlUpgrade qemu-seabiosUpgrade qemu-SLOFUpgrade xen-kmp-defaultUpgrade qemu-vgabiosUpgrade qemu-block-nfsUpgrade qemu-microvmUpgrade xen-doc-htmlUpgrade qemu-linux-userUpgrade qemu-hw-usb-hostUpgrade qemu-hw-display-virtio-gpuUpgrade xen-tools-domUUpgrade qemu-ivshmem-toolsUpgrade qemu-block-dmgUpgrade qemu-testsuiteUpgrade qemu-audio-alsaUpgrade qemu-s390Upgrade qemu-hw-display-virtio-vgaUpgrade xen-libsUpgrade qemu-audio-ossUpgrade qemu-x86Upgrade qemu-skibootUpgrade qemu-sgabiosUpgrade qemu-ksmUpgrade qemu-vhost-user-gpuUpgrade qemu-audio-sdlUpgrade qemu-ui-cursesUpgrade qemu-chardev-baumUpgrade xenUpgrade qemu-guest-agentUpgrade qemu-block-rbdUpgrade qemu-hw-usb-smartcardUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-ui-openglUpgrade qemu-ui-gtkUpgrade qemu-block-curlUpgrade qemu-armUpgrade xen-toolsUpgrade qemu-audio-spiceUpgrade qemuUpgrade qemu-s390xUpgrade qemu-hw-display-qxlUpgrade qemu-block-glusterUpgrade qemu-hw-usb-redirectUpgrade qemu-kvmUpgrade qemu-block-sshUpgrade qemu-ui-spice-coreUpgrade qemu-block-iscsiUpgrade qemu-langUpgrade qemu-audio-paUpgrade xen-libs-32bitUpgrade qemu-ipxeUpgrade qemu-ui-spice-appUpgrade qemu-accel-tcg-x86Upgrade qemu-ppcUpgrade qemu-toolsUpgrade qemu-chardev-spiceUpgrade qemu-hw-s390x-virtio-gpu-ccw | Aug 21, 2021 | May 26, 2021 |
| Ubuntu | — | Upgrade qemu-block-extra (Ubuntu Pro)Upgrade qemu-system-x86Upgrade qemu-utils (Ubuntu Pro)Upgrade qemu-system-armUpgrade qemu (Ubuntu Pro)Upgrade qemu-system-mips (Ubuntu Pro)Upgrade qemu-system-sparcUpgrade qemu-common (Ubuntu Pro)Upgrade qemu-guest-agent (Ubuntu Pro)Upgrade qemu-system-ppc (Ubuntu Pro)Upgrade qemu-system-arm (Ubuntu Pro)Upgrade qemu-kvm (Ubuntu Pro)Upgrade qemu-system-s390x (Ubuntu Pro)Upgrade qemu-systemUpgrade qemu-system-s390xUpgrade qemu-system-sparc (Ubuntu Pro)Upgrade qemu-system-common (Ubuntu Pro)Upgrade qemu-system-x86 (Ubuntu Pro)Upgrade qemu-user (Ubuntu Pro)Upgrade qemu-user-binfmt (Ubuntu Pro)Upgrade qemu-system-ppcUpgrade qemu-system-aarch64 (Ubuntu Pro)Upgrade qemu-system-x86-microvmUpgrade qemu-system-mipsUpgrade qemu-keymaps (Ubuntu Pro)Upgrade qemu-system-x86-xenUpgrade qemu-user-static (Ubuntu Pro)Upgrade qemu-system-miscUpgrade qemu-system-misc (Ubuntu Pro)Upgrade qemu-system (Ubuntu Pro) | Jul 16, 2021 | May 26, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub