An issue was discovered in QEMU 7.1.0 through 8.2.1. register_vfs in hw/pci/pcie_sriov.c mishandles the situation where a guest writes NumVFs greater than TotalVFs, leading to a buffer overflow in VF implementations.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade qemu-kvm-block-curlUpgrade qemu-kvm-device-display-virtio-vgaUpgrade qemu-kvm-toolsUpgrade qemu-pr-helperUpgrade qemu-imgUpgrade qemu-guest-agentUpgrade qemu-kvm-block-rbdUpgrade qemu-kvm-device-usb-redirectUpgrade qemu-kvm-device-display-virtio-gpu-ccwUpgrade qemu-kvm-ui-egl-headlessUpgrade qemu-kvm-audio-paUpgrade qemu-kvm-coreUpgrade qemu-kvm-device-usb-hostUpgrade qemu-kvm-ui-openglUpgrade qemu-kvmUpgrade qemu-kvm-commonUpgrade qemu-kvm-device-display-virtio-gpuUpgrade qemu-kvm-block-blkioUpgrade qemu-kvm-device-display-virtio-gpu-pciUpgrade qemu-kvm-docs | Nov 19, 2024 | Feb 19, 2024 |
| Debian | — | Upgrade qemu | Jul 30, 2024 | Feb 19, 2024 |
| Oracle_linux | — | Upgrade libvirt-wiresharkUpgrade qemu-kvm-device-display-virtio-gpuUpgrade libvirt-daemon-driver-storage-scsiUpgrade swtpmUpgrade nbdkit-example-pluginsUpgrade libnbdUpgrade libnbd-bash-completionUpgrade virt-v2v-bash-completionUpgrade libguestfs-java-develUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade libtpms-develUpgrade qemu-kvm-block-sshUpgrade libvirt-dbusUpgrade sgabiosUpgrade libnbd-develUpgrade libvirt-daemon-driver-storage-glusterUpgrade netcf-libsUpgrade libvirt-libsUpgrade libguestfs-rsyncUpgrade libvirt-daemonUpgrade libguestfs-man-pages-jaUpgrade qemu-kvm-block-iscsiUpgrade libiscsiUpgrade qemu-kvm-block-curlUpgrade libvirt-daemon-driver-storage-mpathUpgrade virt-v2v-man-pages-ukUpgrade libguestfs-tools-cUpgrade libvirt-daemon-config-nwfilterUpgrade hivex-develUpgrade qemu-kvm-ui-egl-headlessUpgrade nbdkit-curl-pluginUpgrade nbdkit-tmpdisk-pluginUpgrade libvirt-daemon-driver-storage-coreUpgrade libguestfs-winsupportUpgrade sgabios-binUpgrade libvirt-develUpgrade libguestfs-develUpgrade netcfUpgrade virt-dibUpgrade qemu-guest-agentUpgrade libguestfsUpgrade qemu-kvm-audio-paUpgrade nbdkit-gzip-pluginUpgrade libguestfs-man-pages-ukUpgrade libiscsi-utilsUpgrade nbdkit-gzip-filterUpgrade nbdkit-linuxdisk-pluginUpgrade qemu-pr-helperUpgrade perl-Sys-VirtUpgrade libvirt-daemon-driver-storageUpgrade swtpm-toolsUpgrade virt-v2v-man-pages-jaUpgrade libguestfs-javaUpgrade libvirt-lock-sanlockUpgrade nbdkit-bash-completionUpgrade nbdkitUpgrade nbdfuseUpgrade nbdkit-nbd-pluginUpgrade nbdkit-xz-filterUpgrade qemu-kvm-device-display-virtio-gpu-pciUpgrade qemu-kvm-block-rbdUpgrade libguestfs-applianceUpgrade ruby-hivexUpgrade nbdkit-tar-filterUpgrade libguestfs-toolsUpgrade libvirt-daemon-driver-secretUpgrade python3-libvirtUpgrade qemu-kvm-commonUpgrade libvirt-daemon-driver-qemuUpgrade nbdkit-basic-pluginsUpgrade swtpm-tools-pkcs11Upgrade qemu-kvm-device-display-virtio-vgaUpgrade libguestfs-gfs2Upgrade libguestfs-rescueUpgrade qemu-virtiofsdUpgrade qemu-kvm-coreUpgrade qemu-kvmUpgrade libvirt-daemon-driver-storage-diskUpgrade libtpmsUpgrade libvirt-clientUpgrade nbdkit-serverUpgrade nbdkit-basic-filtersUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-config-networkUpgrade libvirtUpgrade swtpm-libsUpgrade swtpm-develUpgrade qemu-kvm-device-usb-redirectUpgrade python3-libnbdUpgrade libvirt-daemon-driver-storage-logicalUpgrade seabiosUpgrade libvirt-docsUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libguestfs-bash-completionUpgrade hivexUpgrade libvirt-daemon-driver-storage-rbdUpgrade perl-Sys-GuestfsUpgrade libvirt-daemon-driver-nodedevUpgrade seavgabios-binUpgrade qemu-kvm-ui-openglUpgrade qemu-kvm-device-usb-hostUpgrade qemu-kvm-block-glusterUpgrade nbdkit-vddk-pluginUpgrade nbdkit-develUpgrade libiscsi-develUpgrade libvirt-nssUpgrade libguestfs-gobject-develUpgrade supermin-develUpgrade qemu-kvm-toolsUpgrade qemu-imgUpgrade python3-libguestfsUpgrade nbdkit-python-pluginUpgrade lua-guestfsUpgrade libvirt-client-qemuUpgrade perl-hivexUpgrade netcf-develUpgrade nbdkit-tar-pluginUpgrade nbdkit-ssh-pluginUpgrade libvirt-daemon-driver-networkUpgrade libvirt-daemon-driver-interfaceUpgrade libguestfs-xfsUpgrade libguestfs-javadocUpgrade libguestfs-inspect-iconsUpgrade virt-v2vUpgrade qemu-kvm-docsUpgrade qemu-kvm-block-blkioUpgrade python3-hivexUpgrade libguestfs-gobjectUpgrade superminUpgrade seabios-binUpgrade ruby-libguestfs | Oct 16, 2024 | Feb 19, 2024 |
| Redhat_linux | — | Upgrade qemu-kvm-common-debuginfoUpgrade qemu-kvm-block-rbd-debuginfoUpgrade qemu-kvm-block-curl-debuginfoUpgrade qemu-kvm-debugsourceUpgrade qemu-kvm-audio-dbus-debuginfoUpgrade qemu-kvm-block-curlUpgrade qemu-kvm-device-display-virtio-gpu-pci-debuginfoUpgrade qemu-kvm-device-display-virtio-vga-debuginfoUpgrade qemu-kvm-ui-dbus-debuginfoUpgrade qemu-guest-agentUpgrade qemu-kvm-tests-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-ccwUpgrade qemu-pr-helper-debuginfoUpgrade qemu-kvm-commonUpgrade qemu-kvm-docsUpgrade qemu-kvm-device-display-virtio-gpuUpgrade qemu-img-debuginfoUpgrade qemu-kvm-audio-pa-debuginfoUpgrade qemu-kvm-tools-debuginfoUpgrade qemu-kvm-block-blkioUpgrade qemu-kvmUpgrade qemu-kvm-coreUpgrade qemu-kvm-device-display-virtio-vgaUpgrade qemu-kvm-core-debuginfoUpgrade qemu-kvm-device-usb-redirectUpgrade qemu-pr-helperUpgrade qemu-kvm-ui-openglUpgrade qemu-kvm-ui-opengl-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-debuginfoUpgrade qemu-kvm-toolsUpgrade qemu-kvm-device-display-virtio-gpu-pciUpgrade qemu-guest-agent-debuginfoUpgrade qemu-kvm-ui-egl-headless-debuginfoUpgrade qemu-imgUpgrade qemu-kvm-device-display-virtio-gpu-ccw-debuginfoUpgrade qemu-kvm-device-usb-hostUpgrade qemu-kvm-debuginfoUpgrade qemu-kvm-block-blkio-debuginfoUpgrade qemu-kvm-audio-paUpgrade qemu-kvm-device-usb-host-debuginfoUpgrade qemu-kvm-block-rbdUpgrade qemu-kvm-device-usb-redirect-debuginfoUpgrade qemu-kvm-ui-egl-headless | Nov 13, 2024 | Feb 19, 2024 |
| Rocky_linux | — | Upgrade qemu-kvmUpgrade qemu-kvm-toolsUpgrade qemu-kvm-ui-opengl-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-ccw-debuginfoUpgrade qemu-kvm-audio-pa-debuginfoUpgrade qemu-kvm-core-debuginfoUpgrade qemu-kvm-block-rbd-debuginfoUpgrade qemu-kvm-block-blkioUpgrade qemu-kvm-device-display-virtio-vga-debuginfoUpgrade qemu-kvm-device-usb-hostUpgrade qemu-kvm-ui-openglUpgrade qemu-kvm-ui-egl-headless-debuginfoUpgrade qemu-kvm-ui-egl-headlessUpgrade qemu-kvm-tools-debuginfoUpgrade qemu-imgUpgrade qemu-img-debuginfoUpgrade qemu-kvm-commonUpgrade qemu-kvm-docsUpgrade qemu-kvm-device-display-virtio-gpu-ccwUpgrade qemu-kvm-device-display-virtio-gpuUpgrade qemu-pr-helper-debuginfoUpgrade qemu-kvm-audio-paUpgrade qemu-guest-agentUpgrade qemu-kvm-device-usb-redirectUpgrade qemu-kvm-coreUpgrade qemu-kvm-block-rbdUpgrade qemu-kvm-block-curl-debuginfoUpgrade qemu-kvm-device-usb-host-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-debuginfoUpgrade qemu-kvm-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-pciUpgrade qemu-pr-helperUpgrade qemu-kvm-device-display-virtio-gpu-pci-debuginfoUpgrade qemu-kvm-device-display-virtio-vgaUpgrade qemu-kvm-device-usb-redirect-debuginfoUpgrade qemu-kvm-debugsourceUpgrade qemu-guest-agent-debuginfoUpgrade qemu-kvm-common-debuginfoUpgrade qemu-kvm-block-curlUpgrade qemu-kvm-block-blkio-debuginfo | Mar 18, 2025 | Feb 19, 2024 |
| Suse | — | Upgrade qemu-ksmUpgrade qemu-ui-gtkUpgrade qemu-seabiosUpgrade qemu-ui-spice-appUpgrade qemu-chardev-spiceUpgrade qemu-block-sshUpgrade qemu-ppcUpgrade qemu-audio-paUpgrade qemu-guest-agentUpgrade qemu-slofUpgrade qemu-block-iscsiUpgrade qemu-block-curlUpgrade qemu-ui-spice-coreUpgrade qemu-accel-tcg-x86Upgrade qemu-vhost-user-gpuUpgrade qemu-audio-spiceUpgrade qemu-audio-alsaUpgrade qemu-accel-qtestUpgrade qemu-skibootUpgrade qemu-hw-usb-redirectUpgrade qemu-langUpgrade qemu-audio-jackUpgrade qemu-ui-openglUpgrade qemu-hw-usb-smartcardUpgrade qemu-block-rbdUpgrade qemu-ipxeUpgrade qemu-block-dmgUpgrade qemu-chardev-baumUpgrade qemu-extraUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-hw-display-qxlUpgrade qemu-toolsUpgrade qemu-kvmUpgrade qemu-microvmUpgrade qemu-s390xUpgrade qemu-x86Upgrade qemu-hw-display-virtio-vgaUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-block-nfsUpgrade qemu-ui-dbusUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-ui-cursesUpgrade qemu-vgabiosUpgrade qemu-block-glusterUpgrade qemu-sgabiosUpgrade qemu-audio-dbusUpgrade qemu-ivshmem-toolsUpgrade qemu-armUpgrade qemuUpgrade qemu-hw-usb-host | Apr 4, 2024 | Feb 19, 2024 |
| Ubuntu | — | Upgrade qemu-system-s390xUpgrade qemu-system-armUpgrade qemu-system-sparcUpgrade qemu-system-mipsUpgrade qemu-systemUpgrade qemu-system-x86Upgrade qemu-system-miscUpgrade qemu-system-ppc | Aug 23, 2024 | Feb 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub