An issue was discovered in QEMU 7.1.0 through 8.2.1. register_vfs in hw/pci/pcie_sriov.c mishandles the situation where a guest writes NumVFs greater than TotalVFs, leading to a buffer overflow in VF implementations.
CVSS Details
- CVSS 3.1 Base Score: 5.3
- CVSS 3.1 Vector: (CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade qemu-kvm-toolsUpgrade qemu-kvm-block-rbdUpgrade qemu-kvm-block-curlUpgrade qemu-pr-helperUpgrade qemu-kvm-device-usb-redirectUpgrade qemu-kvm-device-display-virtio-vgaUpgrade qemu-kvm-device-usb-hostUpgrade qemu-kvm-coreUpgrade qemu-kvm-device-display-virtio-gpu-ccwUpgrade qemu-kvm-audio-paUpgrade qemu-kvm-ui-egl-headlessUpgrade qemu-guest-agentUpgrade qemu-imgUpgrade qemu-kvm-ui-openglUpgrade qemu-kvm-device-display-virtio-gpu-pciUpgrade qemu-kvm-commonUpgrade qemu-kvm-block-blkioUpgrade qemu-kvmUpgrade qemu-kvm-device-display-virtio-gpuUpgrade qemu-kvm-docs | Nov 19, 2024 | Feb 19, 2024 |
| Debian | — | Upgrade qemu | Jul 30, 2024 | Feb 19, 2024 |
| Oracle_linux | — | Upgrade nbdkit-develUpgrade libguestfs-applianceUpgrade seavgabios-binUpgrade swtpm-develUpgrade nbdkit-vddk-pluginUpgrade qemu-kvm-device-display-virtio-vgaUpgrade libiscsi-develUpgrade libguestfs-gfs2Upgrade libvirt-daemon-driver-qemuUpgrade qemu-kvm-commonUpgrade swtpm-tools-pkcs11Upgrade lua-guestfsUpgrade libguestfs-gobject-develUpgrade libvirt-clientUpgrade nbdkit-serverUpgrade qemu-kvm-device-usb-hostUpgrade qemu-kvm-ui-openglUpgrade python3-libguestfsUpgrade libvirt-daemon-driver-nodedevUpgrade qemu-kvm-block-glusterUpgrade nbdkit-tar-filterUpgrade libvirt-daemon-driver-nwfilterUpgrade nbdkit-basic-filtersUpgrade qemu-imgUpgrade supermin-develUpgrade libvirt-nssUpgrade nbdkit-python-pluginUpgrade libvirt-daemon-driver-storage-diskUpgrade ruby-hivexUpgrade qemu-kvmUpgrade libvirtUpgrade libvirt-daemon-config-networkUpgrade perl-Sys-GuestfsUpgrade qemu-virtiofsdUpgrade libguestfs-bash-completionUpgrade libguestfs-rescueUpgrade libvirt-daemon-driver-storage-iscsiUpgrade seabiosUpgrade libguestfs-inspect-iconsUpgrade swtpm-libsUpgrade qemu-kvm-coreUpgrade qemu-kvm-device-usb-redirectUpgrade libvirt-daemon-driver-storage-logicalUpgrade python3-libnbdUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-docsUpgrade virt-v2vUpgrade hivexUpgrade libguestfs-javadocUpgrade libguestfs-xfsUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-client-qemuUpgrade libvirt-daemon-driver-networkUpgrade nbdkit-ssh-pluginUpgrade netcf-develUpgrade qemu-kvm-block-blkioUpgrade qemu-kvm-docsUpgrade perl-hivexUpgrade qemu-kvm-toolsUpgrade nbdkit-tar-pluginUpgrade libtpmsUpgrade python3-libvirtUpgrade ruby-libguestfsUpgrade libguestfs-toolsUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-secretUpgrade nbdkit-basic-pluginsUpgrade seabios-binUpgrade libguestfs-gobjectUpgrade python3-hivexUpgrade superminUpgrade libguestfs-javaUpgrade swtpm-toolsUpgrade sgabiosUpgrade nbdkit-nbd-pluginUpgrade qemu-kvm-block-curlUpgrade virt-v2v-man-pages-ukUpgrade libiscsiUpgrade libguestfs-rsyncUpgrade hivex-develUpgrade qemu-kvm-audio-paUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-config-nwfilterUpgrade libguestfs-tools-cUpgrade libguestfs-java-develUpgrade libguestfsUpgrade netcfUpgrade nbdkit-gzip-filterUpgrade qemu-pr-helperUpgrade nbdkit-linuxdisk-pluginUpgrade nbdkit-bash-completionUpgrade nbdfuseUpgrade nbdkit-tmpdisk-pluginUpgrade nbdkit-gzip-pluginUpgrade nbdkit-curl-pluginUpgrade libvirt-develUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade libvirt-daemon-driver-storage-coreUpgrade libguestfs-winsupportUpgrade sgabios-binUpgrade libguestfs-develUpgrade libtpms-develUpgrade virt-v2v-bash-completionUpgrade libguestfs-man-pages-ukUpgrade qemu-kvm-block-sshUpgrade libnbd-develUpgrade libvirt-lock-sanlockUpgrade perl-Sys-VirtUpgrade libvirt-daemon-driver-storageUpgrade qemu-kvm-ui-egl-headlessUpgrade libguestfs-man-pages-jaUpgrade libnbdUpgrade libnbd-bash-completionUpgrade qemu-kvm-device-display-virtio-gpu-pciUpgrade qemu-kvm-block-rbdUpgrade nbdkit-xz-filterUpgrade nbdkitUpgrade virt-dibUpgrade qemu-kvm-block-iscsiUpgrade netcf-libsUpgrade libvirt-libsUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-wiresharkUpgrade swtpmUpgrade qemu-kvm-device-display-virtio-gpuUpgrade libvirt-daemon-driver-storage-scsiUpgrade libiscsi-utilsUpgrade virt-v2v-man-pages-jaUpgrade qemu-guest-agentUpgrade nbdkit-example-pluginsUpgrade libvirt-dbus | Oct 16, 2024 | Feb 19, 2024 |
| Redhat_linux | — | Upgrade qemu-kvm-ui-egl-headless-debuginfoUpgrade qemu-imgUpgrade qemu-kvm-block-rbdUpgrade qemu-kvm-device-usb-redirectUpgrade qemu-kvm-device-display-virtio-vgaUpgrade qemu-kvm-core-debuginfoUpgrade qemu-pr-helperUpgrade qemu-kvm-device-usb-redirect-debuginfoUpgrade qemu-kvm-block-blkio-debuginfoUpgrade qemu-kvm-debuginfoUpgrade qemu-kvm-device-usb-hostUpgrade qemu-kvm-audio-paUpgrade qemu-kvm-ui-openglUpgrade qemu-kvm-device-display-virtio-gpu-debuginfoUpgrade qemu-kvm-ui-opengl-debuginfoUpgrade qemu-kvm-device-usb-host-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-ccw-debuginfoUpgrade qemu-guest-agent-debuginfoUpgrade qemu-kvm-toolsUpgrade qemu-kvm-coreUpgrade qemu-kvm-ui-egl-headlessUpgrade qemu-kvm-device-display-virtio-gpu-pciUpgrade qemu-kvm-device-display-virtio-vga-debuginfoUpgrade qemu-kvm-docsUpgrade qemu-kvm-debugsourceUpgrade qemu-kvm-commonUpgrade qemu-kvm-tests-debuginfoUpgrade qemu-img-debuginfoUpgrade qemu-kvm-device-display-virtio-gpuUpgrade qemu-kvm-block-curlUpgrade qemu-kvm-audio-dbus-debuginfoUpgrade qemu-kvm-audio-pa-debuginfoUpgrade qemu-kvm-block-curl-debuginfoUpgrade qemu-kvm-common-debuginfoUpgrade qemu-kvm-block-rbd-debuginfoUpgrade qemu-kvmUpgrade qemu-kvm-block-blkioUpgrade qemu-kvm-tools-debuginfoUpgrade qemu-kvm-ui-dbus-debuginfoUpgrade qemu-guest-agentUpgrade qemu-kvm-device-display-virtio-gpu-pci-debuginfoUpgrade qemu-pr-helper-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-ccw | Nov 13, 2024 | Feb 19, 2024 |
| Rocky_linux | — | Upgrade qemu-guest-agent-debuginfoUpgrade qemu-kvm-block-curl-debuginfoUpgrade qemu-kvm-block-curlUpgrade qemu-kvm-common-debuginfoUpgrade qemu-kvm-block-rbdUpgrade qemu-kvm-device-usb-redirectUpgrade qemu-kvm-device-usb-redirect-debuginfoUpgrade qemu-guest-agentUpgrade qemu-kvm-block-blkio-debuginfoUpgrade qemu-kvm-coreUpgrade qemu-kvm-device-display-virtio-gpu-pciUpgrade qemu-kvm-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-pci-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-debuginfoUpgrade qemu-kvm-audio-paUpgrade qemu-kvm-debugsourceUpgrade qemu-pr-helperUpgrade qemu-pr-helper-debuginfoUpgrade qemu-kvm-device-display-virtio-vgaUpgrade qemu-kvm-device-usb-host-debuginfoUpgrade qemu-kvm-device-display-virtio-gpuUpgrade qemu-kvm-docsUpgrade qemu-kvm-device-display-virtio-gpu-ccwUpgrade qemu-kvm-core-debuginfoUpgrade qemu-imgUpgrade qemu-kvm-ui-egl-headless-debuginfoUpgrade qemu-kvm-audio-pa-debuginfoUpgrade qemu-kvm-tools-debuginfoUpgrade qemu-kvmUpgrade qemu-kvm-commonUpgrade qemu-kvm-ui-opengl-debuginfoUpgrade qemu-kvm-block-blkioUpgrade qemu-kvm-ui-egl-headlessUpgrade qemu-img-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-ccw-debuginfoUpgrade qemu-kvm-block-rbd-debuginfoUpgrade qemu-kvm-toolsUpgrade qemu-kvm-ui-openglUpgrade qemu-kvm-device-display-virtio-vga-debuginfoUpgrade qemu-kvm-device-usb-host | Mar 18, 2025 | Feb 19, 2024 |
| Suse | — | Upgrade qemu-hw-display-qxlUpgrade qemu-hw-usb-hostUpgrade qemuUpgrade qemu-armUpgrade qemu-ivshmem-toolsUpgrade qemu-sgabiosUpgrade qemu-block-glusterUpgrade qemu-audio-dbusUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-s390xUpgrade qemu-ui-dbusUpgrade qemu-ui-cursesUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-block-nfsUpgrade qemu-x86Upgrade qemu-vgabiosUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-kvmUpgrade qemu-microvmUpgrade qemu-toolsUpgrade qemu-ipxeUpgrade qemu-block-curlUpgrade qemu-accel-qtestUpgrade qemu-skibootUpgrade qemu-audio-jackUpgrade qemu-chardev-baumUpgrade qemu-hw-usb-redirectUpgrade qemu-hw-usb-smartcardUpgrade qemu-audio-spiceUpgrade qemu-chardev-spiceUpgrade qemu-block-iscsiUpgrade qemu-ppcUpgrade qemu-audio-alsaUpgrade qemu-ui-spice-appUpgrade qemu-seabiosUpgrade qemu-ui-gtkUpgrade qemu-block-dmgUpgrade qemu-ui-spice-coreUpgrade qemu-ksmUpgrade qemu-vhost-user-gpuUpgrade qemu-accel-tcg-x86Upgrade qemu-slofUpgrade qemu-ui-openglUpgrade qemu-block-rbdUpgrade qemu-guest-agentUpgrade qemu-audio-paUpgrade qemu-block-sshUpgrade qemu-extraUpgrade qemu-lang | Apr 4, 2024 | Feb 19, 2024 |
| Ubuntu | — | Upgrade qemu-system-sparcUpgrade qemu-system-armUpgrade qemu-system-s390xUpgrade qemu-system-miscUpgrade qemu-systemUpgrade qemu-system-mipsUpgrade qemu-system-ppcUpgrade qemu-system-x86 | Aug 23, 2024 | Feb 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub