QEMU through 8.0.4 accesses a NULL pointer in nvme_directive_receive in hw/nvme/ctrl.c because there is no check for whether an endurance group is configured before checking whether Flexible Data Placement is enabled.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Jul 27, 2026 | Jul 27, 2026 |
| Oracle_linux | — | Upgrade nbdkit-develUpgrade python3-libnbdUpgrade libguestfs-gobject-develUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-storage-iscsiUpgrade nbdkit-tar-filterUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-docsUpgrade libtpms-develUpgrade perl-hivexUpgrade nbdkit-gzip-filterUpgrade netcf-develUpgrade libguestfs-gobjectUpgrade hivexUpgrade lua-guestfsUpgrade libguestfs-javaUpgrade nbdkit-curl-pluginUpgrade swtpm-tools-pkcs11Upgrade perl-Sys-GuestfsUpgrade libiscsiUpgrade nbdkit-linuxdisk-pluginUpgrade qemu-kvm-block-sshUpgrade libvirt-nssUpgrade qemu-kvmUpgrade ruby-hivexUpgrade libvirt-lock-sanlockUpgrade qemu-imgUpgrade qemu-kvm-block-rbdUpgrade virt-dibUpgrade swtpmUpgrade nbdkit-python-pluginUpgrade libvirt-daemon-driver-storage-coreUpgrade libguestfsUpgrade libguestfs-man-pages-jaUpgrade libvirtUpgrade nbdkit-basic-filtersUpgrade nbdkit-basic-pluginsUpgrade swtpm-libsUpgrade libguestfs-inspect-iconsUpgrade libvirt-daemon-driver-storage-logicalUpgrade ruby-libguestfsUpgrade libtpmsUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-daemon-driver-qemuUpgrade seavgabios-binUpgrade qemu-kvm-block-glusterUpgrade libguestfs-applianceUpgrade libguestfs-winsupportUpgrade qemu-kvm-coreUpgrade libvirt-daemon-driver-nodedevUpgrade qemu-virtiofsdUpgrade libnbd-bash-completionUpgrade nbdkit-tmpdisk-pluginUpgrade nbdkit-gzip-pluginUpgrade libvirt-daemon-driver-storage-mpathUpgrade libiscsi-utilsUpgrade qemu-kvm-block-curlUpgrade qemu-kvm-commonUpgrade python3-hivexUpgrade nbdkit-xz-filterUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-nwfilterUpgrade swtpm-develUpgrade seabios-binUpgrade nbdfuseUpgrade virt-v2v-man-pages-ukUpgrade virt-v2vUpgrade seabiosUpgrade perl-Sys-VirtUpgrade nbdkit-bash-completionUpgrade libvirt-libsUpgrade libvirt-daemon-driver-storage-rbdUpgrade libguestfs-tools-cUpgrade nbdkitUpgrade libvirt-wiresharkUpgrade libvirt-develUpgrade libvirt-daemon-kvmUpgrade libguestfs-gfs2Upgrade libguestfs-develUpgrade superminUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-clientUpgrade libnbd-develUpgrade libguestfs-rsyncUpgrade libguestfs-man-pages-ukUpgrade libguestfs-javadocUpgrade virt-v2v-man-pages-jaUpgrade supermin-develUpgrade nbdkit-example-pluginsUpgrade sgabiosUpgrade nbdkit-nbd-pluginUpgrade libvirt-daemonUpgrade libguestfs-xfsUpgrade qemu-kvm-block-iscsiUpgrade sgabios-binUpgrade qemu-guest-agentUpgrade nbdkit-serverUpgrade libguestfs-java-develUpgrade libguestfs-bash-completionUpgrade virt-v2v-bash-completionUpgrade python3-libvirtUpgrade python3-libguestfsUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade netcfUpgrade libvirt-daemon-config-networkUpgrade hivex-develUpgrade libguestfs-toolsUpgrade libiscsi-develUpgrade nbdkit-vddk-pluginUpgrade libnbdUpgrade libguestfs-rescueUpgrade swtpm-toolsUpgrade nbdkit-ssh-pluginUpgrade netcf-libsUpgrade nbdkit-tar-pluginUpgrade libvirt-dbus | Oct 16, 2024 | Aug 6, 2023 |
| Ubuntu | — | Upgrade qemu-system-xenUpgrade qemu-system-armUpgrade qemu-system-x86-xenUpgrade qemu-system-sparcUpgrade qemuUpgrade qemu-system-miscUpgrade qemu-system-ppcUpgrade qemu-system-s390xUpgrade qemu-system-mipsUpgrade qemu-system-x86-microvmUpgrade qemu-systemUpgrade qemu-system-x86 | Jan 9, 2024 | Aug 14, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub