softmmu/physmem.c in QEMU through 7.0.0 can perform an uninitialized read on the translate_fail path, leading to an io_readx or io_writex crash. NOTE: a third party states that the Non-virtualization Use Case in the qemu.org reference applies here, i.e., "Bugs affecting the non-virtualization use case are not considered security bugs at this time.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Sep 6, 2022 | Jul 11, 2022 |
| Gentoo Linux | — | Upgrade app-emulation/qemu. | Aug 12, 2024 | Jul 11, 2022 |
| Suse | — | Upgrade qemu-seabiosUpgrade qemu-audio-ossUpgrade qemu-ksmUpgrade qemu-block-sshUpgrade qemu-block-iscsiUpgrade qemu-ui-cursesUpgrade qemu-block-dmgUpgrade qemu-testsuiteUpgrade qemu-armUpgrade qemu-linux-userUpgrade qemu-ppcUpgrade qemu-ui-openglUpgrade qemu-langUpgrade qemu-hw-display-virtio-vgaUpgrade qemuUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-skibootUpgrade qemu-ui-sdlUpgrade qemu-ui-spice-coreUpgrade qemu-chardev-spiceUpgrade qemu-audio-paUpgrade qemu-block-glusterUpgrade qemu-ivshmem-toolsUpgrade qemu-ipxeUpgrade qemu-hw-display-qxlUpgrade qemu-ui-spice-appUpgrade qemu-kvmUpgrade qemu-hw-usb-smartcardUpgrade qemu-accel-qtestUpgrade qemu-x86Upgrade qemu-hw-usb-hostUpgrade qemu-s390xUpgrade qemu-toolsUpgrade qemu-SLOFUpgrade qemu-audio-sdlUpgrade qemu-hw-usb-redirectUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-sgabiosUpgrade qemu-s390Upgrade qemu-audio-jackUpgrade qemu-accel-tcg-x86Upgrade qemu-ui-gtkUpgrade qemu-block-curlUpgrade qemu-block-nfsUpgrade qemu-vgabiosUpgrade qemu-audio-alsaUpgrade qemu-chardev-baumUpgrade qemu-vhost-user-gpuUpgrade qemu-microvmUpgrade qemu-block-rbdUpgrade qemu-guest-agentUpgrade qemu-audio-spiceUpgrade qemu-extra | Oct 26, 2022 | Jul 11, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub