An issue was discovered in QEMU 7.1.0 through 8.2.1. register_vfs in hw/pci/pcie_sriov.c mishandles the situation where a guest writes NumVFs greater than TotalVFs, leading to a buffer overflow in VF implementations.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade qemu-kvm-block-rbdUpgrade qemu-kvm-coreUpgrade qemu-kvm-device-usb-hostUpgrade qemu-kvm-device-display-virtio-gpu-ccwUpgrade qemu-pr-helperUpgrade qemu-kvm-ui-egl-headlessUpgrade qemu-kvm-block-curlUpgrade qemu-kvm-toolsUpgrade qemu-guest-agentUpgrade qemu-kvm-audio-paUpgrade qemu-kvm-device-usb-redirectUpgrade qemu-kvm-device-display-virtio-vgaUpgrade qemu-imgUpgrade qemu-kvmUpgrade qemu-kvm-docsUpgrade qemu-kvm-block-blkioUpgrade qemu-kvm-commonUpgrade qemu-kvm-ui-openglUpgrade qemu-kvm-device-display-virtio-gpu-pciUpgrade qemu-kvm-device-display-virtio-gpu | Nov 19, 2024 | Feb 19, 2024 |
| Debian | — | Upgrade qemu | Jul 30, 2024 | Feb 19, 2024 |
| Oracle_linux | — | Upgrade libguestfs-develUpgrade libnbd-develUpgrade qemu-kvm-audio-paUpgrade qemu-kvm-block-rbdUpgrade sgabiosUpgrade libvirt-daemon-driver-storage-coreUpgrade virt-dibUpgrade nbdkit-gzip-pluginUpgrade nbdkit-tmpdisk-pluginUpgrade virt-v2v-man-pages-jaUpgrade libvirt-dbusUpgrade netcf-libsUpgrade nbdkit-nbd-pluginUpgrade perl-Sys-VirtUpgrade libvirt-develUpgrade libvirt-lock-sanlockUpgrade qemu-guest-agentUpgrade sgabios-binUpgrade nbdkitUpgrade libguestfs-man-pages-jaUpgrade nbdkit-bash-completionUpgrade qemu-kvm-device-display-virtio-gpu-pciUpgrade libvirt-daemon-driver-storage-mpathUpgrade netcfUpgrade libguestfsUpgrade nbdkit-example-pluginsUpgrade swtpm-toolsUpgrade libguestfs-javaUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade nbdkit-curl-pluginUpgrade nbdkit-xz-filterUpgrade qemu-kvm-block-iscsiUpgrade libvirt-daemon-driver-storageUpgrade libguestfs-tools-cUpgrade libvirt-libsUpgrade libvirt-daemon-config-nwfilterUpgrade libguestfs-winsupportUpgrade qemu-kvm-ui-egl-headlessUpgrade libguestfs-java-develUpgrade nbdkit-gzip-filterUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-wiresharkUpgrade libtpms-develUpgrade qemu-kvm-block-sshUpgrade libiscsi-utilsUpgrade libnbdUpgrade libnbd-bash-completionUpgrade qemu-kvm-device-display-virtio-gpuUpgrade qemu-pr-helperUpgrade qemu-kvm-block-curlUpgrade nbdkit-linuxdisk-pluginUpgrade virt-v2v-man-pages-ukUpgrade libguestfs-man-pages-ukUpgrade swtpmUpgrade virt-v2v-bash-completionUpgrade nbdfuseUpgrade hivex-develUpgrade libguestfs-rsyncUpgrade libiscsiUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-qemuUpgrade ruby-hivexUpgrade seavgabios-binUpgrade perl-Sys-GuestfsUpgrade nbdkit-basic-pluginsUpgrade libvirt-daemon-kvmUpgrade libguestfs-toolsUpgrade qemu-kvm-device-display-virtio-vgaUpgrade qemu-kvm-commonUpgrade libguestfs-gfs2Upgrade swtpm-tools-pkcs11Upgrade superminUpgrade ruby-libguestfsUpgrade libguestfs-applianceUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-clientUpgrade libtpmsUpgrade libguestfs-rescueUpgrade qemu-kvmUpgrade qemu-kvm-coreUpgrade nbdkit-tar-filterUpgrade qemu-virtiofsdUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-storage-iscsiUpgrade hivexUpgrade seabiosUpgrade libvirt-daemon-driver-storage-logicalUpgrade libguestfs-bash-completionUpgrade libvirt-docsUpgrade qemu-kvm-ui-openglUpgrade qemu-kvm-device-usb-hostUpgrade qemu-kvm-block-glusterUpgrade nbdkit-vddk-pluginUpgrade nbdkit-develUpgrade libiscsi-develUpgrade lua-guestfsUpgrade supermin-develUpgrade qemu-kvm-toolsUpgrade qemu-imgUpgrade python3-libguestfsUpgrade nbdkit-python-pluginUpgrade libvirt-nssUpgrade libguestfs-gobject-develUpgrade nbdkit-ssh-pluginUpgrade qemu-kvm-docsUpgrade netcf-develUpgrade nbdkit-tar-pluginUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-client-qemuUpgrade libguestfs-xfsUpgrade libguestfs-javadocUpgrade libguestfs-inspect-iconsUpgrade virt-v2vUpgrade qemu-kvm-block-blkioUpgrade perl-hivexUpgrade libvirt-daemon-driver-networkUpgrade qemu-kvm-device-usb-redirectUpgrade libvirt-daemon-config-networkUpgrade swtpm-libsUpgrade seabios-binUpgrade nbdkit-serverUpgrade nbdkit-basic-filtersUpgrade libvirt-daemon-driver-nwfilterUpgrade python3-hivexUpgrade libvirtUpgrade libvirt-daemon-driver-nodedevUpgrade swtpm-develUpgrade python3-libvirtUpgrade libvirt-daemon-driver-secretUpgrade python3-libnbdUpgrade libguestfs-gobject | Oct 16, 2024 | Feb 19, 2024 |
| Redhat_linux | — | Upgrade qemu-kvm-core-debuginfoUpgrade qemu-kvm-device-display-virtio-vgaUpgrade qemu-kvm-device-usb-host-debuginfoUpgrade qemu-pr-helperUpgrade qemu-kvm-ui-egl-headlessUpgrade qemu-kvm-coreUpgrade qemu-kvm-device-display-virtio-gpu-debuginfoUpgrade qemu-kvm-ui-opengl-debuginfoUpgrade qemu-kvm-debuginfoUpgrade qemu-guest-agent-debuginfoUpgrade qemu-kvm-block-blkio-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-pciUpgrade qemu-kvm-toolsUpgrade qemu-kvm-audio-paUpgrade qemu-kvm-device-display-virtio-gpu-ccw-debuginfoUpgrade qemu-kvm-ui-openglUpgrade qemu-imgUpgrade qemu-kvm-ui-egl-headless-debuginfoUpgrade qemu-kvm-device-usb-redirectUpgrade qemu-kvm-block-rbdUpgrade qemu-kvm-device-usb-redirect-debuginfoUpgrade qemu-kvm-device-usb-hostUpgrade qemu-kvm-device-display-virtio-gpu-pci-debuginfoUpgrade qemu-kvm-audio-dbus-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-ccwUpgrade qemu-pr-helper-debuginfoUpgrade qemu-kvm-tests-debuginfoUpgrade qemu-kvm-ui-dbus-debuginfoUpgrade qemu-guest-agentUpgrade qemu-kvm-block-curlUpgrade qemu-kvm-device-display-virtio-gpuUpgrade qemu-img-debuginfoUpgrade qemu-kvmUpgrade qemu-kvm-docsUpgrade qemu-kvm-debugsourceUpgrade qemu-kvm-tools-debuginfoUpgrade qemu-kvm-audio-pa-debuginfoUpgrade qemu-kvm-block-curl-debuginfoUpgrade qemu-kvm-block-rbd-debuginfoUpgrade qemu-kvm-common-debuginfoUpgrade qemu-kvm-commonUpgrade qemu-kvm-device-display-virtio-vga-debuginfoUpgrade qemu-kvm-block-blkio | Nov 13, 2024 | Feb 19, 2024 |
| Rocky_linux | — | Upgrade qemu-kvm-device-display-virtio-gpuUpgrade qemu-kvm-device-display-virtio-vgaUpgrade qemu-pr-helper-debuginfoUpgrade qemu-kvm-block-blkio-debuginfoUpgrade qemu-guest-agent-debuginfoUpgrade qemu-kvm-device-usb-host-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-pci-debuginfoUpgrade qemu-kvm-device-usb-redirectUpgrade qemu-kvm-device-usb-redirect-debuginfoUpgrade qemu-guest-agentUpgrade qemu-kvm-audio-paUpgrade qemu-kvm-block-curlUpgrade qemu-kvm-common-debuginfoUpgrade qemu-kvm-debugsourceUpgrade qemu-pr-helperUpgrade qemu-kvm-block-curl-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-pciUpgrade qemu-kvm-block-rbdUpgrade qemu-kvm-coreUpgrade qemu-kvm-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-debuginfoUpgrade qemu-kvm-block-blkioUpgrade qemu-kvm-toolsUpgrade qemu-kvm-tools-debuginfoUpgrade qemu-kvm-ui-egl-headlessUpgrade qemu-img-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-ccw-debuginfoUpgrade qemu-kvm-block-rbd-debuginfoUpgrade qemu-imgUpgrade qemu-kvm-ui-egl-headless-debuginfoUpgrade qemu-kvm-audio-pa-debuginfoUpgrade qemu-kvm-device-display-virtio-vga-debuginfoUpgrade qemu-kvm-docsUpgrade qemu-kvm-device-display-virtio-gpu-ccwUpgrade qemu-kvm-core-debuginfoUpgrade qemu-kvm-ui-opengl-debuginfoUpgrade qemu-kvm-ui-openglUpgrade qemu-kvm-commonUpgrade qemu-kvmUpgrade qemu-kvm-device-usb-host | Mar 18, 2025 | Feb 19, 2024 |
| Suse | — | Upgrade qemu-toolsUpgrade qemu-SLOFUpgrade qemu-microvmUpgrade qemu-audio-dbusUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-sgabiosUpgrade qemu-ui-cursesUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-ivshmem-toolsUpgrade qemu-kvmUpgrade qemu-block-nfsUpgrade qemu-ui-dbusUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-vgabiosUpgrade qemu-armUpgrade qemu-hw-display-qxlUpgrade qemuUpgrade qemu-block-glusterUpgrade qemu-hw-usb-hostUpgrade qemu-s390xUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-x86Upgrade qemu-block-curlUpgrade qemu-seabiosUpgrade qemu-ipxeUpgrade qemu-extraUpgrade qemu-block-sshUpgrade qemu-skibootUpgrade qemu-ui-spice-coreUpgrade qemu-accel-tcg-x86Upgrade qemu-accel-qtestUpgrade qemu-vhost-user-gpuUpgrade qemu-ksmUpgrade qemu-block-dmgUpgrade qemu-ui-gtkUpgrade qemu-block-rbdUpgrade qemu-audio-spiceUpgrade qemu-ui-openglUpgrade qemu-ppcUpgrade qemu-chardev-spiceUpgrade qemu-block-iscsiUpgrade qemu-audio-alsaUpgrade qemu-ui-spice-appUpgrade qemu-audio-jackUpgrade qemu-hw-usb-redirectUpgrade qemu-langUpgrade qemu-hw-usb-smartcardUpgrade qemu-audio-paUpgrade qemu-guest-agentUpgrade qemu-chardev-baum | Apr 4, 2024 | Feb 19, 2024 |
| Ubuntu | — | Upgrade qemu-system-s390xUpgrade qemu-system-armUpgrade qemu-system-sparcUpgrade qemu-system-ppcUpgrade qemu-systemUpgrade qemu-system-x86Upgrade qemu-system-mipsUpgrade qemu-system-misc | Aug 23, 2024 | Feb 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub