QEMU through 8.0.4 accesses a NULL pointer in nvme_directive_receive in hw/nvme/ctrl.c because there is no check for whether an endurance group is configured before checking whether Flexible Data Placement is enabled.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Jul 27, 2026 | Jul 27, 2026 |
| Oracle_linux | — | Upgrade libguestfs-gobject-develUpgrade libvirt-nssUpgrade hivexUpgrade libvirt-daemon-driver-storageUpgrade qemu-kvmUpgrade libvirt-daemon-driver-storage-iscsiUpgrade lua-guestfsUpgrade libguestfs-man-pages-jaUpgrade perl-hivexUpgrade nbdkit-develUpgrade seavgabios-binUpgrade libguestfs-winsupportUpgrade nbdkit-tar-filterUpgrade qemu-imgUpgrade perl-Sys-GuestfsUpgrade ruby-hivexUpgrade python3-libnbdUpgrade nbdkit-basic-filtersUpgrade nbdkit-basic-pluginsUpgrade virt-dibUpgrade ruby-libguestfsUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-lock-sanlockUpgrade libvirtUpgrade qemu-kvm-block-rbdUpgrade nbdkit-tmpdisk-pluginUpgrade libnbd-bash-completionUpgrade libvirt-daemon-driver-storage-diskUpgrade libguestfs-gobjectUpgrade libtpms-develUpgrade libtpmsUpgrade libvirt-docsUpgrade nbdkit-curl-pluginUpgrade netcf-develUpgrade libvirt-daemon-config-nwfilterUpgrade libguestfsUpgrade libguestfs-javaUpgrade libvirt-daemon-driver-storage-glusterUpgrade nbdkit-gzip-filterUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-qemuUpgrade swtpmUpgrade nbdkit-gzip-pluginUpgrade libiscsiUpgrade nbdkit-linuxdisk-pluginUpgrade libguestfs-applianceUpgrade nbdkit-python-pluginUpgrade swtpm-libsUpgrade libvirt-daemon-driver-storage-coreUpgrade qemu-kvm-block-glusterUpgrade qemu-virtiofsdUpgrade qemu-kvm-block-sshUpgrade qemu-kvm-coreUpgrade libguestfs-inspect-iconsUpgrade swtpm-tools-pkcs11Upgrade libvirt-libsUpgrade libguestfs-bash-completionUpgrade hivex-develUpgrade libvirt-daemon-config-networkUpgrade perl-Sys-VirtUpgrade nbdkit-bash-completionUpgrade nbdkitUpgrade libvirt-clientUpgrade libvirt-daemon-driver-storage-scsiUpgrade python3-libguestfsUpgrade libvirt-daemon-driver-storage-rbdUpgrade virt-v2v-man-pages-ukUpgrade netcf-libsUpgrade nbdkit-serverUpgrade swtpm-develUpgrade sgabios-binUpgrade seabios-binUpgrade qemu-kvm-block-iscsiUpgrade qemu-guest-agentUpgrade netcfUpgrade libguestfs-java-develUpgrade virt-v2v-bash-completionUpgrade nbdkit-tar-pluginUpgrade libnbdUpgrade nbdkit-ssh-pluginUpgrade libvirt-dbusUpgrade superminUpgrade virt-v2vUpgrade nbdfuseUpgrade libguestfs-javadocUpgrade libguestfs-xfsUpgrade qemu-kvm-block-curlUpgrade nbdkit-nbd-pluginUpgrade sgabiosUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemonUpgrade virt-v2v-man-pages-jaUpgrade libguestfs-rsyncUpgrade swtpm-toolsUpgrade libiscsi-utilsUpgrade libguestfs-rescueUpgrade python3-hivexUpgrade nbdkit-xz-filterUpgrade libvirt-daemon-driver-secretUpgrade qemu-kvm-commonUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-kvmUpgrade libguestfs-gfs2Upgrade libguestfs-develUpgrade libvirt-wiresharkUpgrade libvirt-develUpgrade libguestfs-tools-cUpgrade seabiosUpgrade supermin-develUpgrade nbdkit-example-pluginsUpgrade libvirt-daemon-driver-interfaceUpgrade libnbd-develUpgrade libguestfs-man-pages-ukUpgrade libiscsi-develUpgrade libguestfs-toolsUpgrade python3-libvirtUpgrade nbdkit-vddk-pluginUpgrade libvirt-daemon-driver-storage-iscsi-direct | Oct 16, 2024 | Aug 6, 2023 |
| Ubuntu | — | Upgrade qemu-system-mipsUpgrade qemu-system-x86Upgrade qemu-system-ppcUpgrade qemu-systemUpgrade qemu-system-s390xUpgrade qemu-system-x86-microvmUpgrade qemu-system-armUpgrade qemu-system-miscUpgrade qemuUpgrade qemu-system-xenUpgrade qemu-system-x86-xenUpgrade qemu-system-sparc | Jan 9, 2024 | Aug 14, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub