An issue was discovered in QEMU 7.1.0 through 8.2.1. register_vfs in hw/pci/pcie_sriov.c mishandles the situation where a guest writes NumVFs greater than TotalVFs, leading to a buffer overflow in VF implementations.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade qemu-kvm-device-display-virtio-gpu-ccwUpgrade qemu-kvm-audio-paUpgrade qemu-pr-helperUpgrade qemu-kvm-ui-egl-headlessUpgrade qemu-imgUpgrade qemu-kvm-toolsUpgrade qemu-guest-agentUpgrade qemu-kvm-coreUpgrade qemu-kvm-device-usb-hostUpgrade qemu-kvm-device-usb-redirectUpgrade qemu-kvm-block-rbdUpgrade qemu-kvm-device-display-virtio-vgaUpgrade qemu-kvm-block-curlUpgrade qemu-kvm-docsUpgrade qemu-kvm-device-display-virtio-gpu-pciUpgrade qemu-kvm-ui-openglUpgrade qemu-kvm-device-display-virtio-gpuUpgrade qemu-kvm-block-blkioUpgrade qemu-kvmUpgrade qemu-kvm-common | Nov 19, 2024 | Feb 19, 2024 |
| Debian | — | Upgrade qemu | Jul 30, 2024 | Feb 19, 2024 |
| Oracle_linux | — | Upgrade seabios-binUpgrade ruby-libguestfsUpgrade swtpm-libsUpgrade python3-hivexUpgrade python3-libvirtUpgrade nbdkit-develUpgrade seavgabios-binUpgrade qemu-kvm-device-usb-hostUpgrade nbdkit-vddk-pluginUpgrade libvirt-daemon-driver-storage-diskUpgrade qemu-kvm-block-glusterUpgrade qemu-kvm-docsUpgrade virt-v2vUpgrade libtpmsUpgrade libiscsi-develUpgrade nbdkit-ssh-pluginUpgrade nbdkit-tar-pluginUpgrade qemu-virtiofsdUpgrade perl-hivexUpgrade qemu-kvm-block-blkioUpgrade qemu-kvm-ui-openglUpgrade netcf-develUpgrade libvirt-client-qemuUpgrade libvirt-docsUpgrade libguestfs-inspect-iconsUpgrade swtpm-develUpgrade libvirt-daemon-driver-storage-iscsiUpgrade seabiosUpgrade libguestfs-javadocUpgrade nbdkit-basic-filtersUpgrade nbdkit-serverUpgrade libvirt-daemon-kvmUpgrade python3-libnbdUpgrade libvirt-daemon-config-networkUpgrade libvirt-daemon-driver-nodedevUpgrade qemu-kvm-device-usb-redirectUpgrade libguestfs-xfsUpgrade python3-libguestfsUpgrade qemu-imgUpgrade lua-guestfsUpgrade supermin-develUpgrade libvirt-daemon-driver-storage-rbdUpgrade libguestfs-gobject-develUpgrade libvirt-nssUpgrade qemu-kvm-toolsUpgrade libguestfs-gfs2Upgrade qemu-kvm-commonUpgrade qemu-kvm-device-display-virtio-vgaUpgrade hivexUpgrade qemu-kvmUpgrade libguestfs-bash-completionUpgrade libvirtUpgrade libvirt-daemon-driver-interfaceUpgrade swtpm-tools-pkcs11Upgrade libvirt-daemon-driver-qemuUpgrade libguestfs-rescueUpgrade libvirt-daemon-driver-storage-logicalUpgrade nbdkit-python-pluginUpgrade qemu-kvm-coreUpgrade libvirt-clientUpgrade ruby-hivexUpgrade libvirt-daemon-driver-secretUpgrade nbdkit-basic-pluginsUpgrade libguestfs-toolsUpgrade libvirt-daemon-driver-nwfilterUpgrade superminUpgrade libguestfs-gobjectUpgrade perl-Sys-GuestfsUpgrade libguestfs-applianceUpgrade nbdkit-tar-filterUpgrade libvirt-daemon-driver-networkUpgrade nbdkit-xz-filterUpgrade virt-v2v-bash-completionUpgrade virt-v2v-man-pages-jaUpgrade swtpm-toolsUpgrade sgabiosUpgrade qemu-kvm-audio-paUpgrade nbdkit-example-pluginsUpgrade qemu-kvm-ui-egl-headlessUpgrade libvirt-libsUpgrade qemu-guest-agentUpgrade libguestfs-man-pages-jaUpgrade libguestfs-develUpgrade libiscsi-utilsUpgrade nbdkit-nbd-pluginUpgrade nbdkitUpgrade libvirt-lock-sanlockUpgrade nbdfuseUpgrade qemu-pr-helperUpgrade nbdkit-linuxdisk-pluginUpgrade nbdkit-gzip-filterUpgrade nbdkit-bash-completionUpgrade libvirt-daemon-driver-storageUpgrade qemu-kvm-device-display-virtio-gpu-pciUpgrade qemu-kvm-block-rbdUpgrade libguestfs-java-develUpgrade libguestfsUpgrade netcfUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-config-nwfilterUpgrade libguestfs-tools-cUpgrade libvirt-daemonUpgrade libguestfs-rsyncUpgrade hivex-develUpgrade qemu-kvm-block-curlUpgrade libiscsiUpgrade virt-v2v-man-pages-ukUpgrade swtpmUpgrade qemu-kvm-block-sshUpgrade libtpms-develUpgrade libnbd-bash-completionUpgrade libnbdUpgrade libguestfs-man-pages-ukUpgrade libvirt-wiresharkUpgrade sgabios-binUpgrade nbdkit-gzip-pluginUpgrade libvirt-develUpgrade libvirt-daemon-driver-storage-coreUpgrade nbdkit-tmpdisk-pluginUpgrade libvirt-daemon-driver-storage-scsiUpgrade nbdkit-curl-pluginUpgrade qemu-kvm-device-display-virtio-gpuUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade libguestfs-winsupportUpgrade virt-dibUpgrade perl-Sys-VirtUpgrade netcf-libsUpgrade libvirt-daemon-driver-storage-glusterUpgrade libnbd-develUpgrade qemu-kvm-block-iscsiUpgrade libvirt-dbusUpgrade libguestfs-java | Oct 16, 2024 | Feb 19, 2024 |
| Redhat_linux | — | Upgrade qemu-kvm-ui-opengl-debuginfoUpgrade qemu-kvm-device-display-virtio-vgaUpgrade qemu-kvm-device-usb-hostUpgrade qemu-kvm-device-usb-redirectUpgrade qemu-kvm-device-usb-redirect-debuginfoUpgrade qemu-kvm-block-rbdUpgrade qemu-kvm-block-blkio-debuginfoUpgrade qemu-kvm-debuginfoUpgrade qemu-imgUpgrade qemu-kvm-ui-egl-headless-debuginfoUpgrade qemu-pr-helperUpgrade qemu-kvm-device-display-virtio-gpu-ccw-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-pciUpgrade qemu-kvm-audio-paUpgrade qemu-kvm-ui-egl-headlessUpgrade qemu-kvm-core-debuginfoUpgrade qemu-kvm-device-usb-host-debuginfoUpgrade qemu-kvm-ui-openglUpgrade qemu-kvm-toolsUpgrade qemu-guest-agent-debuginfoUpgrade qemu-kvm-coreUpgrade qemu-kvm-commonUpgrade qemu-kvm-audio-dbus-debuginfoUpgrade qemu-kvm-device-display-virtio-vga-debuginfoUpgrade qemu-kvm-block-blkioUpgrade qemu-kvm-tools-debuginfoUpgrade qemu-kvm-audio-pa-debuginfoUpgrade qemu-kvm-debugsourceUpgrade qemu-kvm-tests-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-ccwUpgrade qemu-kvm-block-curl-debuginfoUpgrade qemu-kvm-common-debuginfoUpgrade qemu-kvm-device-display-virtio-gpuUpgrade qemu-img-debuginfoUpgrade qemu-pr-helper-debuginfoUpgrade qemu-kvm-block-rbd-debuginfoUpgrade qemu-kvm-block-curlUpgrade qemu-guest-agentUpgrade qemu-kvm-docsUpgrade qemu-kvmUpgrade qemu-kvm-ui-dbus-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-pci-debuginfo | Nov 13, 2024 | Feb 19, 2024 |
| Rocky_linux | — | Upgrade qemu-kvm-coreUpgrade qemu-kvm-device-display-virtio-gpu-pciUpgrade qemu-kvm-block-rbdUpgrade qemu-pr-helperUpgrade qemu-kvm-debuginfoUpgrade qemu-kvm-device-usb-host-debuginfoUpgrade qemu-kvm-block-curl-debuginfoUpgrade qemu-kvm-block-blkio-debuginfoUpgrade qemu-kvm-debugsourceUpgrade qemu-guest-agent-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-debuginfoUpgrade qemu-kvm-device-usb-redirect-debuginfoUpgrade qemu-kvm-device-usb-redirectUpgrade qemu-kvm-device-display-virtio-vgaUpgrade qemu-kvm-device-display-virtio-gpu-pci-debuginfoUpgrade qemu-kvm-common-debuginfoUpgrade qemu-kvm-device-display-virtio-gpuUpgrade qemu-kvm-block-curlUpgrade qemu-pr-helper-debuginfoUpgrade qemu-kvm-audio-paUpgrade qemu-guest-agentUpgrade qemu-kvm-block-blkioUpgrade qemu-kvm-core-debuginfoUpgrade qemu-kvm-device-usb-hostUpgrade qemu-kvm-block-rbd-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-ccw-debuginfoUpgrade qemu-kvm-toolsUpgrade qemu-kvm-ui-opengl-debuginfoUpgrade qemu-kvm-docsUpgrade qemu-kvm-device-display-virtio-gpu-ccwUpgrade qemu-kvm-device-display-virtio-vga-debuginfoUpgrade qemu-kvm-ui-egl-headlessUpgrade qemu-img-debuginfoUpgrade qemu-kvm-ui-openglUpgrade qemu-kvm-audio-pa-debuginfoUpgrade qemu-imgUpgrade qemu-kvm-ui-egl-headless-debuginfoUpgrade qemu-kvm-tools-debuginfoUpgrade qemu-kvmUpgrade qemu-kvm-common | Mar 18, 2025 | Feb 19, 2024 |
| Suse | — | Upgrade qemu-ksmUpgrade qemu-extraUpgrade qemu-chardev-baumUpgrade qemu-hw-usb-smartcardUpgrade qemu-block-sshUpgrade qemu-hw-usb-redirectUpgrade qemu-seabiosUpgrade qemu-block-dmgUpgrade qemu-block-curlUpgrade qemu-audio-paUpgrade qemu-ui-spice-coreUpgrade qemu-guest-agentUpgrade qemu-vhost-user-gpuUpgrade qemu-accel-qtestUpgrade qemu-skibootUpgrade qemu-langUpgrade qemu-audio-spiceUpgrade qemu-audio-alsaUpgrade qemu-accel-tcg-x86Upgrade qemu-block-iscsiUpgrade qemu-ppcUpgrade qemu-audio-jackUpgrade qemu-ui-gtkUpgrade qemu-ui-spice-appUpgrade qemu-block-rbdUpgrade qemu-ipxeUpgrade qemu-ui-openglUpgrade qemu-chardev-spiceUpgrade qemu-block-nfsUpgrade qemu-armUpgrade qemu-hw-usb-hostUpgrade qemu-x86Upgrade qemu-kvmUpgrade qemu-ui-dbusUpgrade qemu-block-glusterUpgrade qemu-audio-dbusUpgrade qemu-sgabiosUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-vgabiosUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-ui-cursesUpgrade qemu-ivshmem-toolsUpgrade qemu-s390xUpgrade qemu-hw-display-qxlUpgrade qemuUpgrade qemu-toolsUpgrade qemu-microvmUpgrade qemu-SLOF | Apr 4, 2024 | Feb 19, 2024 |
| Ubuntu | — | Upgrade qemu-systemUpgrade qemu-system-mipsUpgrade qemu-system-miscUpgrade qemu-system-x86Upgrade qemu-system-ppcUpgrade qemu-system-armUpgrade qemu-system-sparcUpgrade qemu-system-s390x | Aug 23, 2024 | Feb 19, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub