An issue was discovered in QEMU 7.1.0 through 8.2.1. register_vfs in hw/pci/pcie_sriov.c does not set NumVFs to PCI_SRIOV_TOTAL_VF, and thus interaction with hw/nvme/ctrl.c is mishandled.
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Jul 30, 2024 | Feb 19, 2024 |
| Oracle_linux | — | Upgrade libvirt-daemon-driver-interfaceUpgrade libvirt-client-qemuUpgrade libvirt-docsUpgrade qemu-kvm-block-sshUpgrade python3-hivexUpgrade libvirt-develUpgrade virt-v2vUpgrade nbdkit-serverUpgrade libnbd-develUpgrade superminUpgrade nbdkit-vddk-pluginUpgrade libvirt-daemon-driver-networkUpgrade virt-v2v-bash-completionUpgrade virt-v2v-man-pages-jaUpgrade qemu-kvm-block-curlUpgrade qemu-kvm-block-rbdUpgrade libvirt-daemon-driver-nodedevUpgrade libguestfs-inspect-iconsUpgrade libvirt-libsUpgrade libguestfs-javadocUpgrade python3-libnbdUpgrade libiscsi-develUpgrade perl-Sys-GuestfsUpgrade libvirtUpgrade nbdkit-develUpgrade qemu-guest-agentUpgrade libnbdUpgrade nbdkit-python-pluginUpgrade libguestfs-tools-cUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade nbdkit-bash-completionUpgrade libguestfs-bash-completionUpgrade python3-libguestfsUpgrade libvirt-daemonUpgrade libguestfs-toolsUpgrade libiscsi-utilsUpgrade libguestfs-man-pages-jaUpgrade libguestfs-rescueUpgrade libvirt-daemon-driver-storage-scsiUpgrade virt-v2v-man-pages-ukUpgrade nbdkit-tar-pluginUpgrade nbdkit-xz-filterUpgrade qemu-kvm-block-glusterUpgrade qemu-kvm-commonUpgrade nbdkit-tar-filterUpgrade swtpm-toolsUpgrade sgabiosUpgrade swtpm-develUpgrade netcfUpgrade libvirt-daemon-driver-storage-mpathUpgrade nbdkitUpgrade lua-guestfsUpgrade nbdkit-basic-filtersUpgrade nbdkit-ssh-pluginUpgrade libvirt-wiresharkUpgrade libvirt-daemon-driver-storage-rbdUpgrade libguestfs-gfs2Upgrade libguestfs-man-pages-ukUpgrade libvirt-daemon-config-networkUpgrade libguestfs-xfsUpgrade libvirt-daemon-driver-storage-coreUpgrade swtpm-libsUpgrade perl-Sys-VirtUpgrade libguestfs-applianceUpgrade nbdkit-gzip-pluginUpgrade nbdfuseUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-storage-glusterUpgrade netcf-libsUpgrade libvirt-dbusUpgrade nbdkit-curl-pluginUpgrade ruby-hivexUpgrade libvirt-daemon-driver-storage-diskUpgrade libtpmsUpgrade libtpms-develUpgrade libnbd-bash-completionUpgrade libguestfs-java-develUpgrade nbdkit-gzip-filterUpgrade qemu-imgUpgrade libvirt-daemon-config-nwfilterUpgrade libiscsiUpgrade qemu-kvm-block-iscsiUpgrade python3-libvirtUpgrade nbdkit-linuxdisk-pluginUpgrade libvirt-daemon-driver-qemuUpgrade libguestfs-rsyncUpgrade nbdkit-tmpdisk-pluginUpgrade hivex-develUpgrade qemu-virtiofsdUpgrade netcf-develUpgrade ruby-libguestfsUpgrade qemu-kvm-coreUpgrade qemu-kvmUpgrade nbdkit-nbd-pluginUpgrade libvirt-daemon-kvmUpgrade libvirt-daemon-driver-storage-iscsiUpgrade hivexUpgrade virt-dibUpgrade libvirt-daemon-driver-storageUpgrade libguestfsUpgrade libvirt-clientUpgrade supermin-develUpgrade nbdkit-example-pluginsUpgrade libvirt-nssUpgrade libvirt-lock-sanlockUpgrade perl-hivexUpgrade sgabios-binUpgrade libguestfs-winsupportUpgrade seabiosUpgrade nbdkit-basic-pluginsUpgrade libguestfs-gobject-develUpgrade libguestfs-gobjectUpgrade swtpmUpgrade swtpm-tools-pkcs11Upgrade seavgabios-binUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-nwfilterUpgrade libguestfs-javaUpgrade libguestfs-develUpgrade seabios-bin | Oct 16, 2024 | Feb 19, 2024 |
| Suse | — | Upgrade qemu-sgabiosUpgrade qemu-block-glusterUpgrade qemu-audio-spiceUpgrade qemu-s390xUpgrade qemu-audio-paUpgrade qemu-headlessUpgrade qemu-pr-helperUpgrade qemu-chardev-spiceUpgrade qemu-langUpgrade qemu-hw-display-qxlUpgrade qemu-ui-dbusUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-audio-dbusUpgrade qemu-x86Upgrade qemu-ivshmem-toolsUpgrade qemu-hw-usb-hostUpgrade qemu-vmsr-helperUpgrade qemuUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-ppcUpgrade qemu-guest-agentUpgrade qemu-kvmUpgrade qemu-vgabiosUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-armUpgrade qemu-SLOFUpgrade qemu-block-sshUpgrade qemu-audio-jackUpgrade qemu-block-nfsUpgrade qemu-microvmUpgrade qemu-toolsUpgrade qemu-block-rbdUpgrade qemu-hw-usb-redirectUpgrade qemu-ipxeUpgrade qemu-ui-openglUpgrade qemu-ui-spice-coreUpgrade qemu-extraUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-block-curlUpgrade qemu-ui-gtkUpgrade qemu-docUpgrade qemu-audio-alsaUpgrade qemu-linux-userUpgrade qemu-accel-tcg-x86Upgrade qemu-seabiosUpgrade qemu-imgUpgrade qemu-spiceUpgrade qemu-ui-spice-appUpgrade qemu-accel-qtestUpgrade qemu-vhost-user-gpuUpgrade qemu-skibootUpgrade qemu-hw-usb-smartcardUpgrade qemu-audio-pipewireUpgrade qemu-ui-cursesUpgrade qemu-audio-ossUpgrade qemu-block-dmgUpgrade qemu-block-iscsiUpgrade qemu-ksmUpgrade qemu-chardev-baum | Apr 4, 2024 | Feb 19, 2024 |
| Ubuntu | — | Upgrade qemu-system-miscUpgrade qemu-system-armUpgrade qemu-system-sparcUpgrade qemu-system-x86Upgrade qemu-system-s390xUpgrade qemu-system-mipsUpgrade qemu-system-ppcUpgrade qemu-system | Aug 23, 2024 | Feb 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub