A flaw was found in the USB redirector device (usb-redir) of QEMU. Small USB packets are combined into a single, large transfer request, to reduce the overhead and improve performance. The combined size of the bulk transfer is used to dynamically allocate a variable length array (VLA) on the stack without proper validation. Since the total size is not bounded, a malicious guest could use this flaw to influence the array length and cause the QEMU process to perform an excessive allocation on the stack, resulting in a denial of service.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade qemu | Aug 22, 2024 | May 26, 2021 |
| Amazon Linux Ami 2 | — | Upgrade qemu-debuginfoUpgrade qemu-user-staticUpgrade qemu-block-nfsUpgrade qemu-system-aarch64Upgrade qemuUpgrade qemu-ui-sdlUpgrade qemu-imgUpgrade qemu-user-binfmtUpgrade qemu-system-x86Upgrade qemu-block-dmgUpgrade qemu-commonUpgrade qemu-audio-sdlUpgrade qemu-ui-cursesUpgrade qemu-kvm-coreUpgrade qemu-kvmUpgrade qemu-block-curlUpgrade qemu-block-iscsiUpgrade qemu-guest-agentUpgrade qemu-audio-paUpgrade qemu-ui-gtkUpgrade ivshmem-toolsUpgrade qemu-audio-ossUpgrade qemu-userUpgrade qemu-block-sshUpgrade qemu-system-x86-coreUpgrade qemu-system-aarch64-coreUpgrade qemu-block-rbdUpgrade qemu-audio-alsa | Jun 6, 2023 | May 26, 2021 |
| Debian | — | Upgrade qemu | Sep 7, 2021 | May 26, 2021 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Aug 16, 2022 | May 26, 2021 |
| Huawei Euleros 2_0_sp9 | — | Upgrade qemu-img | Jan 28, 2022 | May 26, 2021 |
| Oracle_linux | — | Upgrade python3-libguestfsUpgrade hivex-develUpgrade libvirt-daemon-driver-storage-rbdUpgrade sgabiosUpgrade supermin-develUpgrade nbdkit-xz-filterUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade libvirt-daemonUpgrade libguestfs-rescueUpgrade qemu-kvm-commonUpgrade qemuUpgrade libguestfs-man-pages-ukUpgrade libguestfs-rsyncUpgrade virt-dibUpgrade libvirt-adminUpgrade libguestfs-gfs2Upgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-kvmUpgrade libguestfs-javadocUpgrade seabiosUpgrade nbdkit-bash-completionUpgrade qemu-kvm-block-curlUpgrade python3-libvirtUpgrade nbdkitUpgrade netcf-libsUpgrade superminUpgrade seabios-binUpgrade libvirt-libsUpgrade libvirt-dbusUpgrade qemu-block-rbdUpgrade sgabios-binUpgrade qemu-guest-agentUpgrade libvirt-daemon-driver-storageUpgrade libguestfs-develUpgrade libnbd-develUpgrade libvirt-daemon-driver-secretUpgrade qemu-kvm-block-iscsiUpgrade nbdkit-ssh-pluginUpgrade perl-Sys-VirtUpgrade python3-hivexUpgrade qemu-block-glusterUpgrade nbdkit-vddk-pluginUpgrade nbdfuseUpgrade qemu-commonUpgrade qemu-block-iscsiUpgrade virt-v2vUpgrade netcfUpgrade ivshmem-toolsUpgrade libvirt-develUpgrade libnbdUpgrade libvirt-daemon-driver-nwfilterUpgrade libguestfs-xfsUpgrade libvirt-daemon-driver-storage-mpathUpgrade nbdkit-example-pluginsUpgrade libguestfs-bash-completionUpgrade libguestfs-tools-cUpgrade libvirt-daemon-driver-storage-scsiUpgrade libiscsi-develUpgrade libiscsi-utilsUpgrade libvirt-clientUpgrade libguestfs-toolsUpgrade libguestfs-java-develUpgrade libvirt-daemon-driver-storage-iscsiUpgrade ruby-libguestfsUpgrade nbdkit-python-pluginUpgrade libvirt-lock-sanlockUpgrade nbdkit-linuxdisk-pluginUpgrade libguestfs-winsupportUpgrade netcf-develUpgrade qemu-kvm-coreUpgrade qemu-kvm-block-glusterUpgrade qemu-system-x86Upgrade libguestfs-gobject-develUpgrade qemu-system-aarch64-coreUpgrade nbdkit-curl-pluginUpgrade perl-Sys-GuestfsUpgrade libvirt-daemon-driver-storage-logicalUpgrade libguestfs-gobjectUpgrade libvirt-daemon-config-nwfilterUpgrade libguestfs-inspect-iconsUpgrade libguestfs-javaUpgrade libvirt-daemon-driver-storage-coreUpgrade python3-libnbdUpgrade libvirt-nssUpgrade libvirt-daemon-driver-qemuUpgrade qemu-imgUpgrade libvirt-daemon-driver-storage-glusterUpgrade perl-hivexUpgrade libvirt-daemon-driver-storage-diskUpgrade ruby-hivexUpgrade qemu-system-aarch64Upgrade hivexUpgrade qemu-kvm-block-rbdUpgrade qemu-kvm-block-sshUpgrade libvirt-docsUpgrade libvirt-bash-completionUpgrade libguestfsUpgrade seavgabios-binUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-networkUpgrade nbdkit-basic-pluginsUpgrade nbdkit-basic-filtersUpgrade lua-guestfsUpgrade libvirtUpgrade libiscsiUpgrade libguestfs-man-pages-jaUpgrade libguestfs-benchmarkingUpgrade qemu-system-x86-coreUpgrade nbdkit-gzip-pluginUpgrade nbdkit-serverUpgrade qemu-kvmUpgrade nbdkit-devel | Aug 17, 2021 | Apr 30, 2021 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 26, 2021 |
| Suse | — | Upgrade qemu-hw-display-virtio-gpuUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-hw-usb-hostUpgrade qemu-sgabiosUpgrade qemu-linux-userUpgrade qemu-s390Upgrade xenUpgrade qemu-SLOFUpgrade xen-kmp-defaultUpgrade xen-doc-htmlUpgrade qemu-chardev-baumUpgrade qemu-block-dmgUpgrade qemu-audio-alsaUpgrade qemu-x86Upgrade qemu-microvmUpgrade qemu-skibootUpgrade qemu-ui-cursesUpgrade qemu-ksmUpgrade xen-libsUpgrade qemu-testsuiteUpgrade qemu-audio-ossUpgrade qemu-ivshmem-toolsUpgrade qemu-vhost-user-gpuUpgrade qemu-audio-sdlUpgrade qemu-vgabiosUpgrade xen-tools-domUUpgrade qemu-extraUpgrade qemu-block-nfsUpgrade xen-kmp-paeUpgrade qemu-seabiosUpgrade qemu-ui-sdlUpgrade xen-libs-32bitUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-toolsUpgrade qemu-hw-usb-smartcardUpgrade qemu-guest-agentUpgrade qemu-block-rbdUpgrade qemu-ui-spice-appUpgrade qemu-block-sshUpgrade qemu-block-iscsiUpgrade qemu-audio-paUpgrade qemu-hw-usb-redirectUpgrade qemu-ipxeUpgrade qemu-ui-spice-coreUpgrade qemu-s390xUpgrade qemu-audio-spiceUpgrade qemu-ppcUpgrade qemuUpgrade qemu-accel-tcg-x86Upgrade xen-toolsUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-chardev-spiceUpgrade qemu-ui-openglUpgrade qemu-ui-gtkUpgrade qemu-block-glusterUpgrade qemu-armUpgrade qemu-kvmUpgrade qemu-hw-display-qxlUpgrade qemu-langUpgrade qemu-block-curl | Aug 21, 2021 | May 26, 2021 |
| Ubuntu | — | Upgrade qemu (Ubuntu Pro)Upgrade qemu-guest-agent (Ubuntu Pro)Upgrade qemu-block-extra (Ubuntu Pro)Upgrade qemu-system-armUpgrade qemu-system-sparcUpgrade qemu-system-mips (Ubuntu Pro)Upgrade qemu-system-x86Upgrade qemu-common (Ubuntu Pro)Upgrade qemu-utils (Ubuntu Pro)Upgrade qemu-system-common (Ubuntu Pro)Upgrade qemu-user (Ubuntu Pro)Upgrade qemu-system-s390xUpgrade qemu-keymaps (Ubuntu Pro)Upgrade qemu-system (Ubuntu Pro)Upgrade qemu-system-miscUpgrade qemu-system-x86 (Ubuntu Pro)Upgrade qemu-system-misc (Ubuntu Pro)Upgrade qemu-system-arm (Ubuntu Pro)Upgrade qemu-user-static (Ubuntu Pro)Upgrade qemu-system-s390x (Ubuntu Pro)Upgrade qemu-systemUpgrade qemu-system-mipsUpgrade qemu-kvm (Ubuntu Pro)Upgrade qemu-system-x86-microvmUpgrade qemu-user-binfmt (Ubuntu Pro)Upgrade qemu-system-ppcUpgrade qemu-system-ppc (Ubuntu Pro)Upgrade qemu-system-aarch64 (Ubuntu Pro)Upgrade qemu-system-x86-xenUpgrade qemu-system-sparc (Ubuntu Pro) | Jul 16, 2021 | May 26, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub