An issue was discovered in QEMU 7.1.0 through 8.2.1. register_vfs in hw/pci/pcie_sriov.c mishandles the situation where a guest writes NumVFs greater than TotalVFs, leading to a buffer overflow in VF implementations.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade qemu-kvm-block-rbdUpgrade qemu-kvm-device-display-virtio-gpu-ccwUpgrade qemu-guest-agentUpgrade qemu-pr-helperUpgrade qemu-kvm-audio-paUpgrade qemu-kvm-device-display-virtio-vgaUpgrade qemu-kvm-device-usb-hostUpgrade qemu-kvm-block-curlUpgrade qemu-kvm-device-usb-redirectUpgrade qemu-kvm-toolsUpgrade qemu-imgUpgrade qemu-kvm-ui-egl-headlessUpgrade qemu-kvm-coreUpgrade qemu-kvm-device-display-virtio-gpuUpgrade qemu-kvm-block-blkioUpgrade qemu-kvm-docsUpgrade qemu-kvm-device-display-virtio-gpu-pciUpgrade qemu-kvm-ui-openglUpgrade qemu-kvmUpgrade qemu-kvm-common | Nov 19, 2024 | Feb 19, 2024 |
| Debian | — | Upgrade qemu | Jul 30, 2024 | Feb 19, 2024 |
| Oracle_linux | — | Upgrade libguestfs-man-pages-jaUpgrade libnbd-develUpgrade libvirt-daemonUpgrade libvirt-libsUpgrade virt-v2v-man-pages-ukUpgrade hivex-develUpgrade libguestfs-rsyncUpgrade netcf-libsUpgrade libguestfs-develUpgrade sgabios-binUpgrade perl-Sys-VirtUpgrade qemu-kvm-ui-egl-headlessUpgrade virt-dibUpgrade libguestfs-winsupportUpgrade libvirt-daemon-driver-storage-glusterUpgrade nbdkit-gzip-pluginUpgrade qemu-kvm-block-curlUpgrade libnbdUpgrade libnbd-bash-completionUpgrade libvirt-develUpgrade libiscsiUpgrade nbdkitUpgrade qemu-kvm-device-display-virtio-gpu-pciUpgrade libvirt-lock-sanlockUpgrade libguestfs-man-pages-ukUpgrade qemu-kvm-block-rbdUpgrade libvirt-daemon-driver-storageUpgrade libiscsi-utilsUpgrade libvirt-daemon-driver-storage-coreUpgrade virt-v2v-bash-completionUpgrade libvirt-daemon-driver-storage-scsiUpgrade qemu-kvm-device-display-virtio-gpuUpgrade swtpmUpgrade libtpms-develUpgrade libvirt-wiresharkUpgrade qemu-kvm-block-sshUpgrade nbdkit-nbd-pluginUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade sgabiosUpgrade nbdkit-xz-filterUpgrade swtpm-toolsUpgrade qemu-kvm-block-iscsiUpgrade virt-v2v-man-pages-jaUpgrade libguestfs-javaUpgrade qemu-guest-agentUpgrade qemu-kvm-audio-paUpgrade nbdfuseUpgrade nbdkit-curl-pluginUpgrade nbdkit-bash-completionUpgrade nbdkit-tmpdisk-pluginUpgrade libvirt-dbusUpgrade nbdkit-example-pluginsUpgrade nbdkit-gzip-filterUpgrade netcfUpgrade libvirt-daemon-driver-storage-mpathUpgrade qemu-pr-helperUpgrade libvirt-daemon-config-nwfilterUpgrade nbdkit-linuxdisk-pluginUpgrade libguestfsUpgrade libguestfs-java-develUpgrade libguestfs-tools-cUpgrade libvirt-daemon-driver-storage-iscsiUpgrade swtpm-tools-pkcs11Upgrade qemu-kvm-device-display-virtio-vgaUpgrade qemu-kvm-commonUpgrade libguestfs-rescueUpgrade swtpm-libsUpgrade nbdkit-tar-filterUpgrade libguestfs-applianceUpgrade nbdkit-develUpgrade nbdkit-python-pluginUpgrade libguestfs-gobject-develUpgrade libvirt-docsUpgrade libvirt-daemon-driver-qemuUpgrade libguestfs-gfs2Upgrade hivexUpgrade seabiosUpgrade libvirt-daemon-driver-storage-rbdUpgrade libguestfs-bash-completionUpgrade libvirt-daemon-driver-storage-logicalUpgrade libguestfs-gobjectUpgrade superminUpgrade ruby-libguestfsUpgrade python3-libvirtUpgrade python3-hivexUpgrade libvirt-daemon-driver-secretUpgrade libguestfs-toolsUpgrade nbdkit-basic-pluginsUpgrade seabios-binUpgrade nbdkit-ssh-pluginUpgrade seavgabios-binUpgrade qemu-kvm-ui-openglUpgrade qemu-kvm-device-usb-hostUpgrade qemu-kvm-block-glusterUpgrade nbdkit-vddk-pluginUpgrade libiscsi-develUpgrade supermin-develUpgrade libvirt-nssUpgrade qemu-kvm-toolsUpgrade qemu-imgUpgrade python3-libguestfsUpgrade lua-guestfsUpgrade libguestfs-xfsUpgrade libvirt-daemon-driver-networkUpgrade libvirt-client-qemuUpgrade libguestfs-javadocUpgrade libguestfs-inspect-iconsUpgrade qemu-kvm-docsUpgrade qemu-kvm-block-blkioUpgrade perl-hivexUpgrade libvirt-daemon-driver-interfaceUpgrade virt-v2vUpgrade nbdkit-tar-pluginUpgrade netcf-develUpgrade ruby-hivexUpgrade perl-Sys-GuestfsUpgrade nbdkit-serverUpgrade nbdkit-basic-filtersUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-config-networkUpgrade libvirtUpgrade swtpm-develUpgrade qemu-kvm-device-usb-redirectUpgrade python3-libnbdUpgrade libvirt-clientUpgrade qemu-kvm-coreUpgrade qemu-virtiofsdUpgrade qemu-kvmUpgrade libvirt-daemon-driver-storage-diskUpgrade libtpms | Oct 16, 2024 | Feb 19, 2024 |
| Redhat_linux | — | Upgrade qemu-kvm-audio-pa-debuginfoUpgrade qemu-kvm-commonUpgrade qemu-guest-agentUpgrade qemu-kvm-audio-dbus-debuginfoUpgrade qemu-kvm-device-display-virtio-gpuUpgrade qemu-kvm-common-debuginfoUpgrade qemu-img-debuginfoUpgrade qemu-kvm-block-curl-debuginfoUpgrade qemu-kvm-tests-debuginfoUpgrade qemu-kvm-tools-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-pci-debuginfoUpgrade qemu-kvm-docsUpgrade qemu-kvm-device-display-virtio-vga-debuginfoUpgrade qemu-kvm-block-curlUpgrade qemu-kvm-ui-dbus-debuginfoUpgrade qemu-kvmUpgrade qemu-kvm-debugsourceUpgrade qemu-kvm-block-rbd-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-ccwUpgrade qemu-kvm-block-blkioUpgrade qemu-pr-helper-debuginfoUpgrade qemu-kvm-device-usb-redirect-debuginfoUpgrade qemu-kvm-device-usb-host-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-ccw-debuginfoUpgrade qemu-kvm-device-usb-hostUpgrade qemu-kvm-ui-opengl-debuginfoUpgrade qemu-kvm-toolsUpgrade qemu-kvm-device-display-virtio-gpu-pciUpgrade qemu-kvm-ui-egl-headless-debuginfoUpgrade qemu-kvm-block-blkio-debuginfoUpgrade qemu-imgUpgrade qemu-kvm-core-debuginfoUpgrade qemu-kvm-device-display-virtio-vgaUpgrade qemu-kvm-device-display-virtio-gpu-debuginfoUpgrade qemu-kvm-audio-paUpgrade qemu-kvm-debuginfoUpgrade qemu-kvm-device-usb-redirectUpgrade qemu-kvm-ui-openglUpgrade qemu-kvm-block-rbdUpgrade qemu-kvm-ui-egl-headlessUpgrade qemu-pr-helperUpgrade qemu-kvm-coreUpgrade qemu-guest-agent-debuginfo | Nov 13, 2024 | Feb 19, 2024 |
| Rocky_linux | — | Upgrade qemu-pr-helperUpgrade qemu-kvm-device-display-virtio-gpuUpgrade qemu-kvm-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-debuginfoUpgrade qemu-kvm-device-usb-host-debuginfoUpgrade qemu-kvm-device-usb-redirectUpgrade qemu-guest-agentUpgrade qemu-kvm-device-display-virtio-gpu-pci-debuginfoUpgrade qemu-kvm-device-display-virtio-vgaUpgrade qemu-kvm-device-usb-redirect-debuginfoUpgrade qemu-kvm-block-curlUpgrade qemu-kvm-common-debuginfoUpgrade qemu-guest-agent-debuginfoUpgrade qemu-kvm-audio-paUpgrade qemu-kvm-device-display-virtio-gpu-pciUpgrade qemu-pr-helper-debuginfoUpgrade qemu-kvm-block-blkio-debuginfoUpgrade qemu-kvm-debugsourceUpgrade qemu-kvm-block-curl-debuginfoUpgrade qemu-kvm-block-rbdUpgrade qemu-kvm-coreUpgrade qemu-kvm-tools-debuginfoUpgrade qemu-kvm-ui-opengl-debuginfoUpgrade qemu-img-debuginfoUpgrade qemu-kvm-ui-egl-headlessUpgrade qemu-kvm-commonUpgrade qemu-kvmUpgrade qemu-kvm-toolsUpgrade qemu-kvm-device-display-virtio-gpu-ccw-debuginfoUpgrade qemu-kvm-block-rbd-debuginfoUpgrade qemu-kvm-block-blkioUpgrade qemu-kvm-device-display-virtio-vga-debuginfoUpgrade qemu-kvm-device-usb-hostUpgrade qemu-kvm-ui-openglUpgrade qemu-imgUpgrade qemu-kvm-ui-egl-headless-debuginfoUpgrade qemu-kvm-audio-pa-debuginfoUpgrade qemu-kvm-docsUpgrade qemu-kvm-device-display-virtio-gpu-ccwUpgrade qemu-kvm-core-debuginfo | Mar 18, 2025 | Feb 19, 2024 |
| Suse | — | Upgrade qemu-audio-paUpgrade qemu-ui-spice-appUpgrade qemu-audio-alsaUpgrade qemu-chardev-spiceUpgrade qemu-block-rbdUpgrade qemu-ipxeUpgrade qemu-audio-spiceUpgrade qemu-block-iscsiUpgrade qemu-guest-agentUpgrade qemu-ui-openglUpgrade qemu-ppcUpgrade qemu-accel-tcg-x86Upgrade qemu-block-curlUpgrade qemu-slofUpgrade qemu-ksmUpgrade qemu-vhost-user-gpuUpgrade qemu-accel-qtestUpgrade qemu-block-sshUpgrade qemu-seabiosUpgrade qemu-langUpgrade qemu-block-dmgUpgrade qemu-hw-usb-redirectUpgrade qemu-skibootUpgrade qemu-audio-jackUpgrade qemu-ui-spice-coreUpgrade qemu-ui-gtkUpgrade qemu-hw-usb-smartcardUpgrade qemu-chardev-baumUpgrade qemu-extraUpgrade qemu-audio-dbusUpgrade qemuUpgrade qemu-block-nfsUpgrade qemu-ui-cursesUpgrade qemu-sgabiosUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-vgabiosUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-block-glusterUpgrade qemu-x86Upgrade qemu-armUpgrade qemu-s390xUpgrade qemu-hw-usb-hostUpgrade qemu-hw-display-qxlUpgrade qemu-ivshmem-toolsUpgrade qemu-microvmUpgrade qemu-kvmUpgrade qemu-toolsUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-ui-dbusUpgrade qemu-hw-display-virtio-gpu-pci | Apr 4, 2024 | Feb 19, 2024 |
| Ubuntu | — | Upgrade qemu-system-sparcUpgrade qemu-system-armUpgrade qemu-system-s390xUpgrade qemu-system-ppcUpgrade qemu-systemUpgrade qemu-system-miscUpgrade qemu-system-x86Upgrade qemu-system-mips | Aug 23, 2024 | Feb 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub