An issue was discovered in QEMU 7.1.0 through 8.2.1. register_vfs in hw/pci/pcie_sriov.c does not set NumVFs to PCI_SRIOV_TOTAL_VF, and thus interaction with hw/nvme/ctrl.c is mishandled.
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Jul 30, 2024 | Feb 19, 2024 |
| Oracle_linux | — | Upgrade libguestfs-javadocUpgrade libguestfs-rescueUpgrade libguestfs-bash-completionUpgrade libvirtUpgrade libguestfs-toolsUpgrade libiscsi-utilsUpgrade qemu-kvm-block-curlUpgrade libvirt-client-qemuUpgrade libnbd-develUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade libguestfs-inspect-iconsUpgrade nbdkit-bash-completionUpgrade libiscsi-develUpgrade libguestfs-gfs2Upgrade libvirt-daemonUpgrade nbdkit-python-pluginUpgrade swtpm-toolsUpgrade libguestfs-xfsUpgrade nbdkit-vddk-pluginUpgrade nbdkit-basic-filtersUpgrade libvirt-daemon-driver-storage-rbdUpgrade libguestfs-man-pages-ukUpgrade perl-Sys-GuestfsUpgrade nbdkit-serverUpgrade python3-hivexUpgrade nbdkit-develUpgrade libnbdUpgrade lua-guestfsUpgrade superminUpgrade libvirt-daemon-driver-nodedevUpgrade nbdkit-tar-pluginUpgrade virt-v2v-man-pages-ukUpgrade netcfUpgrade libvirt-libsUpgrade qemu-kvm-block-sshUpgrade qemu-kvm-commonUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-storage-scsiUpgrade virt-v2vUpgrade sgabiosUpgrade qemu-guest-agentUpgrade swtpm-develUpgrade libvirt-daemon-config-networkUpgrade nbdkitUpgrade libguestfs-man-pages-jaUpgrade nbdkit-ssh-pluginUpgrade libvirt-wiresharkUpgrade nbdkit-tar-filterUpgrade nbdkit-xz-filterUpgrade python3-libguestfsUpgrade qemu-kvm-block-glusterUpgrade libguestfs-tools-cUpgrade libvirt-develUpgrade qemu-kvm-block-rbdUpgrade virt-v2v-man-pages-jaUpgrade libvirt-daemon-driver-interfaceUpgrade libvirt-daemon-driver-networkUpgrade libvirt-docsUpgrade python3-libnbdUpgrade virt-v2v-bash-completionUpgrade libguestfsUpgrade supermin-develUpgrade libguestfs-rsyncUpgrade libvirt-daemon-driver-storage-diskUpgrade hivex-develUpgrade ruby-hivexUpgrade qemu-virtiofsdUpgrade nbdkit-tmpdisk-pluginUpgrade libtpms-develUpgrade libvirt-clientUpgrade libvirt-daemon-driver-storage-iscsiUpgrade ruby-libguestfsUpgrade qemu-kvm-coreUpgrade qemu-kvmUpgrade netcf-develUpgrade nbdkit-gzip-pluginUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-qemuUpgrade libguestfs-gobject-develUpgrade libguestfs-applianceUpgrade libvirt-daemon-driver-storageUpgrade libvirt-daemon-kvmUpgrade hivexUpgrade virt-dibUpgrade nbdkit-nbd-pluginUpgrade libguestfs-javaUpgrade libguestfs-develUpgrade netcf-libsUpgrade libvirt-daemon-driver-storage-logicalUpgrade swtpmUpgrade sgabios-binUpgrade swtpm-tools-pkcs11Upgrade seavgabios-binUpgrade seabiosUpgrade perl-hivexUpgrade nbdkit-basic-pluginsUpgrade libguestfs-winsupportUpgrade libguestfs-gobjectUpgrade perl-Sys-VirtUpgrade swtpm-libsUpgrade nbdfuseUpgrade libvirt-dbusUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemon-driver-secretUpgrade libvirt-daemon-driver-nwfilterUpgrade seabios-binUpgrade nbdkit-curl-pluginUpgrade python3-libvirtUpgrade nbdkit-example-pluginsUpgrade libvirt-nssUpgrade qemu-kvm-block-iscsiUpgrade nbdkit-linuxdisk-pluginUpgrade nbdkit-gzip-filterUpgrade libvirt-daemon-config-nwfilterUpgrade libiscsiUpgrade libvirt-lock-sanlockUpgrade qemu-imgUpgrade libtpmsUpgrade libnbd-bash-completionUpgrade libguestfs-java-devel | Oct 16, 2024 | Feb 19, 2024 |
| Suse | — | Upgrade qemu-block-nfsUpgrade qemu-toolsUpgrade qemu-audio-jackUpgrade qemu-block-rbdUpgrade qemu-hw-usb-redirectUpgrade qemu-kvmUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-SLOFUpgrade qemu-guest-agentUpgrade qemu-vmsr-helperUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-microvmUpgrade qemu-chardev-spiceUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-headlessUpgrade qemu-ppcUpgrade qemu-audio-paUpgrade qemu-block-glusterUpgrade qemu-audio-spiceUpgrade qemuUpgrade qemu-hw-display-qxlUpgrade qemu-langUpgrade qemu-block-sshUpgrade qemu-s390xUpgrade qemu-ui-dbusUpgrade qemu-sgabiosUpgrade qemu-vgabiosUpgrade qemu-hw-usb-hostUpgrade qemu-ipxeUpgrade qemu-audio-dbusUpgrade qemu-ivshmem-toolsUpgrade qemu-pr-helperUpgrade qemu-x86Upgrade qemu-armUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-ui-cursesUpgrade qemu-linux-userUpgrade qemu-audio-ossUpgrade qemu-accel-tcg-x86Upgrade qemu-ksmUpgrade qemu-block-dmgUpgrade qemu-audio-alsaUpgrade qemu-imgUpgrade qemu-seabiosUpgrade qemu-ui-openglUpgrade qemu-extraUpgrade qemu-hw-usb-smartcardUpgrade qemu-audio-pipewireUpgrade qemu-vhost-user-gpuUpgrade qemu-accel-qtestUpgrade qemu-skibootUpgrade qemu-chardev-baumUpgrade qemu-spiceUpgrade qemu-ui-spice-appUpgrade qemu-ui-spice-coreUpgrade qemu-block-iscsiUpgrade qemu-docUpgrade qemu-ui-gtkUpgrade qemu-block-curl | Apr 4, 2024 | Feb 19, 2024 |
| Ubuntu | — | Upgrade qemu-system-sparcUpgrade qemu-system-miscUpgrade qemu-system-armUpgrade qemu-system-mipsUpgrade qemu-system-x86Upgrade qemu-system-s390xUpgrade qemu-system-ppcUpgrade qemu-system | Aug 23, 2024 | Feb 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub