A use-after-free vulnerability was found in the LSI53C895A SCSI Host Bus Adapter emulation of QEMU. The flaw occurs while processing repeated messages to cancel the current SCSI request via the lsi_do_msgout function. This flaw allows a malicious privileged user within the guest to crash the QEMU process on the host, resulting in a denial of service.
CVSS Details
- CVSS 3.1 Base Score: 4.4
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Mar 16, 2023 | Aug 26, 2022 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Aug 12, 2024 | Aug 26, 2022 |
| Oracle_linux | — | Upgrade nbdkit-tmpdisk-pluginUpgrade qemu-block-iscsiUpgrade qemu-kvmUpgrade qemu-kvm-block-rbdUpgrade qemu-system-aarch64Upgrade swtpm-tools-pkcs11Upgrade libguestfs-tools-cUpgrade netcf-develUpgrade libguestfs-javaUpgrade libguestfs-winsupportUpgrade nbdkit-basic-pluginsUpgrade libguestfs-gobjectUpgrade ruby-libguestfsUpgrade nbdkit-bash-completionUpgrade libguestfs-applianceUpgrade libtpmsUpgrade libvirt-daemon-driver-storage-glusterUpgrade libguestfs-gobject-develUpgrade perl-hivexUpgrade libiscsiUpgrade seavgabios-binUpgrade libvirt-clientUpgrade netcf-libsUpgrade hivex-develUpgrade libguestfs-java-develUpgrade libvirt-daemon-driver-storage-diskUpgrade python3-libnbdUpgrade python3-libvirtUpgrade libvirt-daemon-driver-networkUpgrade hivexUpgrade libguestfs-man-pages-jaUpgrade libvirt-lock-sanlockUpgrade libvirt-dbusUpgrade virt-dibUpgrade libvirt-daemon-config-nwfilterUpgrade lua-guestfsUpgrade perl-Sys-VirtUpgrade libguestfsUpgrade libguestfs-benchmarkingUpgrade libvirt-bash-completionUpgrade swtpmUpgrade libtpms-develUpgrade swtpm-libsUpgrade libvirt-daemon-driver-storageUpgrade nbdkit-gzip-filterUpgrade qemu-block-rbdUpgrade nbdkit-curl-pluginUpgrade qemu-virtiofsdUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libnbd-bash-completionUpgrade qemu-kvm-block-sshUpgrade nbdkit-gzip-pluginUpgrade qemu-system-x86-coreUpgrade qemu-kvm-coreUpgrade sgabios-binUpgrade ruby-hivexUpgrade libvirt-daemon-driver-storage-coreUpgrade nbdkit-linuxdisk-pluginUpgrade qemu-system-aarch64-coreUpgrade nbdkit-python-pluginUpgrade qemu-imgUpgrade libvirt-daemon-driver-storage-logicalUpgrade nbdkit-tar-filterUpgrade nbdkit-nbd-pluginUpgrade libiscsi-utilsUpgrade libvirt-daemon-driver-secretUpgrade swtpm-toolsUpgrade libvirt-daemon-kvmUpgrade libguestfs-develUpgrade perl-Sys-GuestfsUpgrade libguestfs-rescueUpgrade libguestfs-gfs2Upgrade supermin-develUpgrade libguestfs-bash-completionUpgrade ivshmem-toolsUpgrade nbdkit-vddk-pluginUpgrade libguestfs-man-pages-ukUpgrade qemu-kvm-block-glusterUpgrade nbdkit-tar-pluginUpgrade nbdkitUpgrade qemu-kvm-block-curlUpgrade virt-v2v-man-pages-ukUpgrade python3-hivexUpgrade nbdkit-ssh-pluginUpgrade seabios-binUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-interfaceUpgrade qemu-system-x86Upgrade nbdfuseUpgrade qemu-block-glusterUpgrade seabiosUpgrade sgabiosUpgrade qemu-guest-agentUpgrade libvirt-daemon-driver-nwfilterUpgrade libguestfs-toolsUpgrade libguestfs-rsyncUpgrade libguestfs-javadocUpgrade virt-v2v-bash-completionUpgrade libvirt-wiresharkUpgrade qemu-kvm-commonUpgrade libvirt-daemon-driver-storage-mpathUpgrade netcfUpgrade nbdkit-serverUpgrade qemu-commonUpgrade nbdkit-basic-filtersUpgrade libvirt-daemon-driver-qemuUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemonUpgrade libvirtUpgrade libnbd-develUpgrade libiscsi-develUpgrade libvirt-daemon-driver-nodedevUpgrade qemuUpgrade libguestfs-xfsUpgrade libvirt-libsUpgrade qemu-kvm-block-iscsiUpgrade libvirt-docsUpgrade libnbdUpgrade libguestfs-inspect-iconsUpgrade libvirt-nssUpgrade nbdkit-develUpgrade virt-v2v-man-pages-jaUpgrade libvirt-adminUpgrade nbdkit-example-pluginsUpgrade virt-v2vUpgrade libvirt-develUpgrade python3-libguestfsUpgrade swtpm-develUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade nbdkit-xz-filterUpgrade supermin | Nov 5, 2022 | Mar 28, 2022 |
| Suse | — | Upgrade qemu-s390xUpgrade qemu-s390Upgrade qemu-ksmUpgrade qemu-audio-jackUpgrade qemu-audio-alsaUpgrade qemu-vhost-user-gpuUpgrade qemu-kvmUpgrade qemu-block-dmgUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-audio-spiceUpgrade qemu-testsuiteUpgrade qemu-sgabiosUpgrade qemu-ui-spice-appUpgrade qemu-chardev-spiceUpgrade qemu-chardev-baumUpgrade qemu-ui-sdlUpgrade qemu-ipxeUpgrade qemu-SLOFUpgrade qemu-audio-sdlUpgrade qemu-extraUpgrade qemu-block-curlUpgrade qemu-block-rbdUpgrade qemu-ivshmem-toolsUpgrade qemu-accel-qtestUpgrade qemu-block-sshUpgrade qemu-seabiosUpgrade qemu-vgabiosUpgrade qemu-accel-tcg-x86Upgrade qemu-ui-spice-coreUpgrade qemu-ppcUpgrade qemu-guest-agentUpgrade qemu-block-nfsUpgrade qemu-block-iscsiUpgrade qemu-ui-openglUpgrade qemuUpgrade qemu-hw-usb-smartcardUpgrade qemu-toolsUpgrade qemu-audio-paUpgrade qemu-langUpgrade qemu-hw-display-qxlUpgrade qemu-hw-usb-hostUpgrade qemu-ui-gtkUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-block-glusterUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-skibootUpgrade qemu-microvmUpgrade qemu-hw-usb-redirectUpgrade qemu-ui-cursesUpgrade qemu-x86Upgrade qemu-linux-userUpgrade qemu-audio-ossUpgrade qemu-arm | Oct 26, 2022 | Aug 26, 2022 |
| Ubuntu | — | Upgrade qemu-system-s390xUpgrade qemu-system-x86-xenUpgrade qemu-system-x86Upgrade qemu-system-x86-microvmUpgrade qemu-system-ppcUpgrade qemu-system (Ubuntu Pro)Upgrade qemu-systemUpgrade qemu-system-armUpgrade qemu-system-misc (Ubuntu Pro)Upgrade qemu (Ubuntu Pro)Upgrade qemu-system-arm (Ubuntu Pro)Upgrade qemuUpgrade qemu-system-ppc (Ubuntu Pro)Upgrade qemu-system-s390x (Ubuntu Pro)Upgrade qemu-system-sparcUpgrade qemu-system-mips (Ubuntu Pro)Upgrade qemu-system-sparc (Ubuntu Pro)Upgrade qemu-system-aarch64 (Ubuntu Pro)Upgrade qemu-system-mipsUpgrade qemu-system-x86 (Ubuntu Pro)Upgrade qemu-system-misc | Dec 12, 2022 | Aug 26, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub