A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. The issue occurs while handling a "PVRDMA_CMD_CREATE_MR" command due to improper memory remapping (mremap). This flaw allows a malicious guest to crash the QEMU process on the host. The highest threat from this vulnerability is to system availability.
CVSS Details
- CVSS 3.1 Base Score: 6.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Sep 6, 2022 | Mar 25, 2022 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Aug 16, 2022 | Mar 25, 2022 |
| Oracle_linux | — | Upgrade nbdkit-basic-pluginsUpgrade nbdkit-linuxdisk-pluginUpgrade hivex-develUpgrade libiscsi-develUpgrade libvirt-daemon-driver-storage-scsiUpgrade libguestfs-gobjectUpgrade python3-libvirtUpgrade perl-Sys-VirtUpgrade qemu-kvm-coreUpgrade superminUpgrade libguestfs-javaUpgrade libvirt-libsUpgrade libguestfs-javadocUpgrade ruby-hivexUpgrade nbdkit-ssh-pluginUpgrade sgabiosUpgrade libvirt-daemon-driver-storage-iscsiUpgrade virt-dibUpgrade libguestfsUpgrade qemu-imgUpgrade libguestfs-develUpgrade libvirt-daemon-driver-qemuUpgrade qemu-system-x86Upgrade ruby-libguestfsUpgrade libguestfs-java-develUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-dbusUpgrade libvirt-nssUpgrade netcf-develUpgrade libvirt-docsUpgrade libvirt-daemon-driver-storageUpgrade qemu-kvm-block-rbdUpgrade lua-guestfsUpgrade supermin-develUpgrade qemu-system-aarch64Upgrade hivexUpgrade libguestfs-gfs2Upgrade qemu-system-aarch64-coreUpgrade nbdkitUpgrade sgabios-binUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade netcf-libsUpgrade libiscsiUpgrade libguestfs-toolsUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-storage-coreUpgrade qemu-kvm-commonUpgrade seabiosUpgrade seavgabios-binUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-driver-storage-logicalUpgrade qemu-kvm-block-sshUpgrade qemu-block-iscsiUpgrade perl-hivexUpgrade libguestfs-xfsUpgrade qemu-commonUpgrade nbdkit-vddk-pluginUpgrade nbdkit-python-pluginUpgrade libguestfs-tools-cUpgrade perl-Sys-GuestfsUpgrade nbdfuseUpgrade libvirt-daemon-driver-storage-mpathUpgrade nbdkit-serverUpgrade libguestfs-rsyncUpgrade libnbdUpgrade qemu-block-rbdUpgrade libvirtUpgrade libiscsi-utilsUpgrade qemu-kvm-block-iscsiUpgrade qemu-block-glusterUpgrade qemuUpgrade libnbd-develUpgrade libguestfs-bash-completionUpgrade virt-v2vUpgrade qemu-system-x86-coreUpgrade libvirt-adminUpgrade qemu-kvm-block-glusterUpgrade python3-hivexUpgrade nbdkit-curl-pluginUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-driver-nwfilterUpgrade python3-libnbdUpgrade nbdkit-xz-filterUpgrade libvirt-daemon-config-networkUpgrade libguestfs-man-pages-ukUpgrade libguestfs-benchmarkingUpgrade nbdkit-bash-completionUpgrade python3-libguestfsUpgrade seabios-binUpgrade nbdkit-basic-filtersUpgrade libvirt-develUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-clientUpgrade ivshmem-toolsUpgrade qemu-kvmUpgrade qemu-kvm-block-curlUpgrade nbdkit-develUpgrade qemu-guest-agentUpgrade nbdkit-gzip-pluginUpgrade nbdkit-example-pluginsUpgrade libvirt-daemon-driver-secretUpgrade libguestfs-rescueUpgrade libvirt-daemon-driver-nodedevUpgrade libguestfs-man-pages-jaUpgrade libguestfs-gobject-develUpgrade netcfUpgrade libvirt-daemon-kvmUpgrade libvirt-daemonUpgrade libvirt-bash-completionUpgrade libguestfs-inspect-iconsUpgrade libguestfs-winsupport | Aug 17, 2021 | Jun 16, 2021 |
| Suse | — | Upgrade qemu-ui-sdlUpgrade qemu-s390xUpgrade qemu-ksmUpgrade qemu-ui-gtkUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-block-sshUpgrade qemu-extraUpgrade qemu-ui-spice-coreUpgrade qemu-audio-sdlUpgrade qemu-block-rbdUpgrade qemu-block-curlUpgrade qemu-guest-agentUpgrade qemu-hw-usb-smartcardUpgrade qemu-hw-usb-hostUpgrade qemu-s390Upgrade qemu-kvmUpgrade qemu-audio-spiceUpgrade qemu-x86Upgrade qemu-audio-alsaUpgrade qemu-SLOFUpgrade qemu-microvmUpgrade qemu-ipxeUpgrade qemu-chardev-spiceUpgrade qemu-vgabiosUpgrade qemu-sgabiosUpgrade qemu-vhost-user-gpuUpgrade qemu-accel-tcg-x86Upgrade qemu-langUpgrade qemu-chardev-baumUpgrade qemu-linux-userUpgrade qemu-ui-cursesUpgrade qemuUpgrade qemu-block-dmgUpgrade qemu-audio-paUpgrade qemu-audio-ossUpgrade qemu-toolsUpgrade qemu-armUpgrade qemu-ivshmem-toolsUpgrade qemu-block-glusterUpgrade qemu-hw-display-qxlUpgrade qemu-hw-usb-redirectUpgrade qemu-ui-spice-appUpgrade qemu-testsuiteUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-block-iscsiUpgrade qemu-skibootUpgrade qemu-ppcUpgrade qemu-block-nfsUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-seabiosUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-ui-opengl | Jul 22, 2021 | Jul 15, 2021 |
| Ubuntu | — | Upgrade qemu-system-x86-microvmUpgrade qemu-system-mipsUpgrade qemu-system-x86-xenUpgrade qemu-systemUpgrade qemu-system-s390xUpgrade qemu-system-sparcUpgrade qemu-system-x86Upgrade qemu-system-armUpgrade qemu-system-ppcUpgrade qemu-system-misc | Jul 16, 2021 | Jul 15, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub