An issue was discovered in QEMU 7.1.0 through 8.2.1. register_vfs in hw/pci/pcie_sriov.c mishandles the situation where a guest writes NumVFs greater than TotalVFs, leading to a buffer overflow in VF implementations.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade qemu-guest-agentUpgrade qemu-kvm-device-display-virtio-vgaUpgrade qemu-kvm-device-display-virtio-gpu-ccwUpgrade qemu-kvm-toolsUpgrade qemu-kvm-device-usb-redirectUpgrade qemu-pr-helperUpgrade qemu-kvm-ui-egl-headlessUpgrade qemu-kvm-block-rbdUpgrade qemu-kvm-audio-paUpgrade qemu-kvm-block-curlUpgrade qemu-imgUpgrade qemu-kvm-device-usb-hostUpgrade qemu-kvm-coreUpgrade qemu-kvm-device-display-virtio-gpuUpgrade qemu-kvm-docsUpgrade qemu-kvm-ui-openglUpgrade qemu-kvm-device-display-virtio-gpu-pciUpgrade qemu-kvmUpgrade qemu-kvm-commonUpgrade qemu-kvm-block-blkio | Nov 19, 2024 | Feb 19, 2024 |
| Debian | — | Upgrade qemu | Jul 30, 2024 | Feb 19, 2024 |
| Oracle_linux | — | Upgrade nbdkit-bash-completionUpgrade nbdkit-linuxdisk-pluginUpgrade libnbd-develUpgrade libvirt-daemon-driver-storage-glusterUpgrade netcf-libsUpgrade hivex-develUpgrade libiscsiUpgrade libguestfs-java-develUpgrade libvirt-daemonUpgrade netcfUpgrade qemu-kvm-block-curlUpgrade nbdkit-gzip-filterUpgrade nbdfuseUpgrade perl-Sys-VirtUpgrade qemu-kvm-block-iscsiUpgrade qemu-kvm-ui-egl-headlessUpgrade libguestfs-tools-cUpgrade libguestfsUpgrade qemu-kvm-block-rbdUpgrade qemu-pr-helperUpgrade nbdkitUpgrade nbdkit-nbd-pluginUpgrade nbdkit-xz-filterUpgrade qemu-kvm-device-display-virtio-gpuUpgrade libvirt-libsUpgrade qemu-kvm-device-display-virtio-gpu-pciUpgrade libguestfs-man-pages-jaUpgrade libvirt-lock-sanlockUpgrade virt-dibUpgrade libvirt-daemon-driver-storageUpgrade libiscsi-utilsUpgrade libnbdUpgrade libvirt-daemon-driver-storage-scsiUpgrade qemu-kvm-block-sshUpgrade libtpms-develUpgrade swtpmUpgrade libnbd-bash-completionUpgrade virt-v2v-bash-completionUpgrade libvirt-dbusUpgrade qemu-guest-agentUpgrade qemu-kvm-audio-paUpgrade sgabiosUpgrade swtpm-toolsUpgrade libguestfs-javaUpgrade virt-v2v-man-pages-jaUpgrade nbdkit-example-pluginsUpgrade libvirt-wiresharkUpgrade libguestfs-man-pages-ukUpgrade libvirt-daemon-config-nwfilterUpgrade nbdkit-curl-pluginUpgrade libguestfs-winsupportUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade nbdkit-tmpdisk-pluginUpgrade libguestfs-develUpgrade nbdkit-gzip-pluginUpgrade libvirt-develUpgrade libguestfs-rsyncUpgrade sgabios-binUpgrade libvirt-daemon-driver-storage-mpathUpgrade virt-v2v-man-pages-ukUpgrade libvirtUpgrade hivexUpgrade libvirt-clientUpgrade python3-libnbdUpgrade perl-Sys-GuestfsUpgrade nbdkit-basic-filtersUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-nwfilterUpgrade libvirt-daemon-config-networkUpgrade swtpm-develUpgrade libvirt-daemon-driver-nodedevUpgrade libguestfs-xfsUpgrade qemu-kvmUpgrade nbdkit-tar-filterUpgrade libvirt-daemon-driver-storage-diskUpgrade libtpmsUpgrade libguestfs-rescueUpgrade libguestfs-applianceUpgrade libvirt-daemon-driver-storage-logicalUpgrade seabiosUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libguestfs-bash-completionUpgrade ruby-hivexUpgrade qemu-virtiofsdUpgrade qemu-kvm-coreUpgrade libvirt-docsUpgrade libvirt-daemon-driver-qemuUpgrade libguestfs-gobjectUpgrade seabios-binUpgrade libguestfs-gobject-develUpgrade supermin-develUpgrade qemu-kvm-toolsUpgrade qemu-imgUpgrade python3-libguestfsUpgrade nbdkit-python-pluginUpgrade lua-guestfsUpgrade libvirt-nssUpgrade nbdkit-basic-pluginsUpgrade libvirt-daemon-driver-secretUpgrade libguestfs-toolsUpgrade superminUpgrade ruby-libguestfsUpgrade python3-libvirtUpgrade python3-hivexUpgrade nbdkit-ssh-pluginUpgrade libvirt-daemon-driver-networkUpgrade libguestfs-javadocUpgrade libguestfs-inspect-iconsUpgrade virt-v2vUpgrade qemu-kvm-docsUpgrade nbdkit-tar-pluginUpgrade swtpm-tools-pkcs11Upgrade qemu-kvm-device-display-virtio-vgaUpgrade qemu-kvm-commonUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-client-qemuUpgrade qemu-kvm-block-blkioUpgrade perl-hivexUpgrade netcf-develUpgrade libguestfs-gfs2Upgrade nbdkit-serverUpgrade nbdkit-develUpgrade libiscsi-develUpgrade seavgabios-binUpgrade qemu-kvm-ui-openglUpgrade qemu-kvm-device-usb-hostUpgrade qemu-kvm-block-glusterUpgrade nbdkit-vddk-pluginUpgrade swtpm-libsUpgrade qemu-kvm-device-usb-redirect | Oct 16, 2024 | Feb 19, 2024 |
| Redhat_linux | — | Upgrade qemu-kvm-device-usb-redirectUpgrade qemu-kvm-core-debuginfoUpgrade qemu-kvm-ui-openglUpgrade qemu-kvm-toolsUpgrade qemu-kvm-device-display-virtio-gpu-pciUpgrade qemu-kvm-ui-opengl-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-debuginfoUpgrade qemu-kvm-coreUpgrade qemu-kvm-block-rbdUpgrade qemu-pr-helperUpgrade qemu-kvm-block-blkio-debuginfoUpgrade qemu-kvm-debuginfoUpgrade qemu-kvm-ui-egl-headless-debuginfoUpgrade qemu-kvm-audio-paUpgrade qemu-guest-agent-debuginfoUpgrade qemu-kvm-ui-egl-headlessUpgrade qemu-kvm-device-usb-host-debuginfoUpgrade qemu-kvm-device-usb-redirect-debuginfoUpgrade qemu-kvm-device-display-virtio-vgaUpgrade qemu-imgUpgrade qemu-kvm-device-display-virtio-gpu-ccw-debuginfoUpgrade qemu-kvm-device-usb-hostUpgrade qemu-kvm-audio-pa-debuginfoUpgrade qemu-kvm-ui-dbus-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-pci-debuginfoUpgrade qemu-kvm-audio-dbus-debuginfoUpgrade qemu-guest-agentUpgrade qemu-kvm-device-display-virtio-gpu-ccwUpgrade qemu-kvm-commonUpgrade qemu-kvm-block-blkioUpgrade qemu-kvm-debugsourceUpgrade qemu-kvm-tools-debuginfoUpgrade qemu-kvm-block-curl-debuginfoUpgrade qemu-kvm-common-debuginfoUpgrade qemu-pr-helper-debuginfoUpgrade qemu-kvm-device-display-virtio-vga-debuginfoUpgrade qemu-kvm-block-rbd-debuginfoUpgrade qemu-kvm-tests-debuginfoUpgrade qemu-kvm-device-display-virtio-gpuUpgrade qemu-img-debuginfoUpgrade qemu-kvm-docsUpgrade qemu-kvmUpgrade qemu-kvm-block-curl | Nov 13, 2024 | Feb 19, 2024 |
| Rocky_linux | — | Upgrade qemu-kvm-commonUpgrade qemu-kvm-ui-openglUpgrade qemu-kvm-device-usb-hostUpgrade qemu-kvm-device-display-virtio-vga-debuginfoUpgrade qemu-kvm-tools-debuginfoUpgrade qemu-kvm-audio-pa-debuginfoUpgrade qemu-kvm-ui-egl-headless-debuginfoUpgrade qemu-kvm-block-rbd-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-ccw-debuginfoUpgrade qemu-kvm-toolsUpgrade qemu-imgUpgrade qemu-kvm-ui-egl-headlessUpgrade qemu-img-debuginfoUpgrade qemu-kvm-block-blkioUpgrade qemu-kvmUpgrade qemu-kvm-core-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-ccwUpgrade qemu-kvm-ui-opengl-debuginfoUpgrade qemu-kvm-docsUpgrade qemu-kvm-device-usb-host-debuginfoUpgrade qemu-kvm-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-debuginfoUpgrade qemu-kvm-debugsourceUpgrade qemu-kvm-common-debuginfoUpgrade qemu-kvm-block-curlUpgrade qemu-kvm-block-blkio-debuginfoUpgrade qemu-kvm-audio-paUpgrade qemu-guest-agentUpgrade qemu-kvm-device-display-virtio-gpu-pci-debuginfoUpgrade qemu-kvm-device-display-virtio-vgaUpgrade qemu-pr-helper-debuginfoUpgrade qemu-kvm-device-display-virtio-gpuUpgrade qemu-kvm-device-usb-redirect-debuginfoUpgrade qemu-kvm-device-usb-redirectUpgrade qemu-pr-helperUpgrade qemu-kvm-device-display-virtio-gpu-pciUpgrade qemu-kvm-coreUpgrade qemu-kvm-block-curl-debuginfoUpgrade qemu-kvm-block-rbdUpgrade qemu-guest-agent-debuginfo | Mar 18, 2025 | Feb 19, 2024 |
| Suse | — | Upgrade qemu-armUpgrade qemuUpgrade qemu-block-nfsUpgrade qemu-ui-dbusUpgrade qemu-block-glusterUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-sgabiosUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-audio-dbusUpgrade qemu-s390xUpgrade qemu-x86Upgrade qemu-vgabiosUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-toolsUpgrade qemu-kvmUpgrade qemu-hw-display-qxlUpgrade qemu-microvmUpgrade qemu-hw-usb-hostUpgrade qemu-ui-cursesUpgrade qemu-SLOFUpgrade qemu-ivshmem-toolsUpgrade qemu-skibootUpgrade qemu-audio-paUpgrade qemu-ui-gtkUpgrade qemu-block-rbdUpgrade qemu-audio-spiceUpgrade qemu-audio-alsaUpgrade qemu-vhost-user-gpuUpgrade qemu-block-sshUpgrade qemu-ui-spice-coreUpgrade qemu-accel-tcg-x86Upgrade qemu-langUpgrade qemu-hw-usb-smartcardUpgrade qemu-audio-jackUpgrade qemu-seabiosUpgrade qemu-ksmUpgrade qemu-block-dmgUpgrade qemu-ui-spice-appUpgrade qemu-ppcUpgrade qemu-chardev-spiceUpgrade qemu-block-iscsiUpgrade qemu-extraUpgrade qemu-chardev-baumUpgrade qemu-guest-agentUpgrade qemu-hw-usb-redirectUpgrade qemu-block-curlUpgrade qemu-accel-qtestUpgrade qemu-ipxeUpgrade qemu-ui-opengl | Apr 4, 2024 | Feb 19, 2024 |
| Ubuntu | — | Upgrade qemu-system-armUpgrade qemu-system-s390xUpgrade qemu-system-sparcUpgrade qemu-system-ppcUpgrade qemu-system-x86Upgrade qemu-system-miscUpgrade qemu-systemUpgrade qemu-system-mips | Aug 23, 2024 | Feb 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub