QEMU through 8.0.0 could trigger a division by zero in scsi_disk_reset in hw/scsi/scsi-disk.c because scsi_disk_emulate_mode_select does not prevent s->qdev.blocksize from being 256. This stops QEMU and the guest immediately.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade qemu-kvm-device-display-virtio-gpuUpgrade qemu-kvm-commonUpgrade qemu-kvm-device-display-virtio-gpu-pciUpgrade qemu-kvm-ui-openglUpgrade qemu-kvm-device-usb-hostUpgrade qemu-kvm-block-rbdUpgrade qemu-kvm-toolsUpgrade qemu-kvmUpgrade qemu-kvm-device-display-virtio-vgaUpgrade qemu-pr-helperUpgrade qemu-kvm-block-curlUpgrade qemu-kvm-device-display-virtio-gpu-ccwUpgrade qemu-kvm-coreUpgrade qemu-kvm-audio-paUpgrade qemu-kvm-device-usb-redirectUpgrade qemu-kvm-ui-egl-headlessUpgrade qemu-kvm-block-blkioUpgrade qemu-guest-agentUpgrade qemu-kvm-docsUpgrade qemu-img | May 8, 2024 | Sep 11, 2023 |
| Debian | — | Upgrade qemu | Jul 30, 2024 | Sep 11, 2023 |
| Oracle_linux | — | Upgrade ruby-libguestfsUpgrade nbdkit-tar-filterUpgrade nbdkit-tmpdisk-pluginUpgrade nbdkit-linuxdisk-pluginUpgrade qemu-imgUpgrade libtpms-develUpgrade qemu-kvm-device-display-virtio-vgaUpgrade qemu-kvm-block-iscsiUpgrade libguestfs-tools-cUpgrade nbdkit-bash-completionUpgrade libguestfs-man-pages-jaUpgrade nbdkit-basic-pluginsUpgrade qemu-kvm-ui-egl-headlessUpgrade virt-v2v-bash-completionUpgrade hivexUpgrade perl-Sys-VirtUpgrade libvirt-daemon-driver-storage-logicalUpgrade nbdkit-vddk-pluginUpgrade qemu-kvm-block-sshUpgrade libiscsiUpgrade libguestfs-java-develUpgrade libvirt-libsUpgrade qemu-guest-agentUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-config-nwfilterUpgrade qemu-virtiofsdUpgrade nbdkitUpgrade libvirt-daemon-driver-nodedevUpgrade python3-libguestfsUpgrade libvirtUpgrade perl-Sys-GuestfsUpgrade virt-dibUpgrade qemu-kvm-device-display-virtio-gpu-pciUpgrade nbdkit-python-pluginUpgrade libnbd-bash-completionUpgrade nbdkit-xz-filterUpgrade qemu-kvm-coreUpgrade python3-hivexUpgrade qemu-kvm-toolsUpgrade qemu-pr-helperUpgrade libvirt-daemon-driver-storage-coreUpgrade sgabiosUpgrade libvirt-daemon-driver-storage-mpathUpgrade libiscsi-utilsUpgrade libguestfs-gobjectUpgrade libguestfs-applianceUpgrade nbdkit-curl-pluginUpgrade sgabios-binUpgrade libguestfs-javaUpgrade libguestfs-bash-completionUpgrade nbdkit-gzip-filterUpgrade swtpmUpgrade qemu-kvm-block-rbdUpgrade libvirt-daemon-driver-storage-iscsiUpgrade superminUpgrade libvirt-dbusUpgrade qemu-kvm-audio-paUpgrade libnbdUpgrade libguestfs-develUpgrade libguestfs-rsyncUpgrade nbdkit-basic-filtersUpgrade qemu-kvm-device-usb-redirectUpgrade libvirt-lock-sanlockUpgrade nbdkit-gzip-pluginUpgrade nbdkit-nbd-pluginUpgrade qemu-kvm-block-curlUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade nbdkit-serverUpgrade libguestfs-rescueUpgrade virt-v2v-man-pages-ukUpgrade qemu-kvm-device-usb-hostUpgrade qemu-kvm-device-display-virtio-gpuUpgrade seavgabios-binUpgrade libvirt-daemon-driver-secretUpgrade swtpm-develUpgrade libvirt-wiresharkUpgrade libguestfs-xfsUpgrade libguestfs-javadocUpgrade swtpm-tools-pkcs11Upgrade libvirt-daemon-driver-qemuUpgrade libguestfs-winsupportUpgrade hivex-develUpgrade libtpmsUpgrade netcfUpgrade nbdkit-develUpgrade libvirt-daemon-driver-storageUpgrade qemu-kvm-ui-openglUpgrade nbdkit-tar-pluginUpgrade libvirt-docsUpgrade libvirt-client-qemuUpgrade supermin-develUpgrade seabios-binUpgrade python3-libnbdUpgrade netcf-libsUpgrade swtpm-libsUpgrade seabiosUpgrade qemu-kvm-commonUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemonUpgrade libnbd-develUpgrade virt-v2v-man-pages-jaUpgrade nbdfuseUpgrade swtpm-toolsUpgrade qemu-kvm-docsUpgrade qemu-kvm-block-glusterUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-interfaceUpgrade libiscsi-develUpgrade libguestfs-inspect-iconsUpgrade libguestfs-man-pages-ukUpgrade python3-libvirtUpgrade nbdkit-ssh-pluginUpgrade qemu-kvm-block-blkioUpgrade libguestfs-toolsUpgrade libvirt-clientUpgrade libvirt-daemon-config-networkUpgrade libguestfs-gobject-develUpgrade libguestfsUpgrade virt-v2vUpgrade ruby-hivexUpgrade perl-hivexUpgrade lua-guestfsUpgrade libvirt-daemon-driver-networkUpgrade libguestfs-gfs2Upgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-develUpgrade qemu-kvmUpgrade netcf-develUpgrade nbdkit-example-pluginsUpgrade libvirt-nssUpgrade libvirt-daemon-kvm | Apr 11, 2024 | Sep 11, 2023 |
| Redhat_linux | — | Upgrade qemu-kvm-device-usb-redirect-debuginfoUpgrade qemu-kvm-tests-debuginfoUpgrade qemu-kvm-ui-egl-headless-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-pciUpgrade qemu-pr-helperUpgrade qemu-kvm-block-blkio-debuginfoUpgrade qemu-kvm-device-usb-host-debuginfoUpgrade qemu-kvm-device-display-virtio-gpuUpgrade qemu-kvm-ui-egl-headlessUpgrade qemu-img-debuginfoUpgrade qemu-guest-agent-debuginfoUpgrade qemu-kvm-debuginfoUpgrade qemu-kvm-block-rbdUpgrade qemu-kvm-block-curlUpgrade qemu-kvm-audio-paUpgrade qemu-kvm-audio-dbus-debuginfoUpgrade qemu-kvm-common-debuginfoUpgrade qemu-guest-agentUpgrade qemu-kvm-device-display-virtio-gpu-debuginfoUpgrade qemu-kvm-block-curl-debuginfoUpgrade qemu-pr-helper-debuginfoUpgrade qemu-kvm-audio-pa-debuginfoUpgrade qemu-kvm-tools-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-pci-debuginfoUpgrade qemu-kvm-ui-dbus-debuginfoUpgrade qemu-kvm-ui-openglUpgrade qemu-kvm-docsUpgrade qemu-kvm-device-usb-hostUpgrade qemu-kvm-ui-opengl-debuginfoUpgrade qemu-kvm-device-display-virtio-vgaUpgrade qemu-kvm-coreUpgrade qemu-kvm-block-blkioUpgrade qemu-kvm-device-display-virtio-vga-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-ccw-debuginfoUpgrade qemu-kvm-commonUpgrade qemu-kvmUpgrade qemu-kvm-block-rbd-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-ccwUpgrade qemu-kvm-core-debuginfoUpgrade qemu-kvm-toolsUpgrade qemu-kvm-device-usb-redirectUpgrade qemu-imgUpgrade qemu-kvm-debugsource | May 1, 2024 | Sep 11, 2023 |
| Rocky_linux | — | Upgrade qemu-kvm-toolsUpgrade qemu-kvm-ui-openglUpgrade qemu-kvm-device-usb-hostUpgrade qemu-kvm-block-curl-debuginfoUpgrade qemu-kvm-debuginfoUpgrade qemu-kvm-audio-paUpgrade qemu-kvm-device-display-virtio-gpu-pci-debuginfoUpgrade qemu-kvm-block-blkio-debuginfoUpgrade qemu-kvm-device-display-virtio-gpuUpgrade qemu-kvm-block-rbdUpgrade qemu-kvm-device-usb-redirect-debuginfoUpgrade qemu-kvm-ui-opengl-debuginfoUpgrade qemu-kvm-device-display-virtio-vgaUpgrade qemu-kvm-device-display-virtio-gpu-debuginfoUpgrade qemu-kvm-device-usb-redirectUpgrade qemu-kvm-commonUpgrade qemu-kvm-common-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-pciUpgrade qemu-pr-helperUpgrade qemu-kvm-ui-egl-headless-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-ccwUpgrade qemu-imgUpgrade qemu-kvm-ui-egl-headlessUpgrade qemu-kvm-device-display-virtio-gpu-ccw-debuginfoUpgrade qemu-kvm-block-rbd-debuginfoUpgrade qemu-guest-agentUpgrade qemu-kvm-tools-debuginfoUpgrade qemu-kvm-block-curlUpgrade qemu-kvm-block-blkioUpgrade qemu-kvm-coreUpgrade qemu-img-debuginfoUpgrade qemu-kvmUpgrade qemu-kvm-core-debuginfoUpgrade qemu-kvm-docsUpgrade qemu-pr-helper-debuginfoUpgrade qemu-kvm-device-usb-host-debuginfoUpgrade qemu-kvm-audio-pa-debuginfoUpgrade qemu-kvm-debugsourceUpgrade qemu-guest-agent-debuginfoUpgrade qemu-kvm-device-display-virtio-vga-debuginfo | May 13, 2024 | Sep 11, 2023 |
| Ubuntu | — | Upgrade qemu-system-armUpgrade qemu-system-sparcUpgrade qemu-systemUpgrade qemu-system-x86Upgrade qemu-system-x86-xenUpgrade qemu-system-xenUpgrade qemu-system-s390xUpgrade qemu-system-mipsUpgrade qemu-system-ppcUpgrade qemu-system-x86-microvmUpgrade qemu-system-miscUpgrade qemu | Jan 9, 2024 | Sep 11, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub