A flaw was found in QEMU. An assertion failure was present in the update_sctp_checksum() function in hw/net/net_tx_pkt.c when trying to calculate the checksum of a short-sized fragmented packet. This flaw allows a malicious guest to crash QEMU and cause a denial of service condition.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Jul 27, 2026 | Jul 27, 2026 |
| Oracle_linux | — | Upgrade seabios-binUpgrade ruby-libguestfsUpgrade libvirt-daemon-driver-qemuUpgrade libguestfs-applianceUpgrade nbdkit-xz-filterUpgrade netcf-libsUpgrade virt-v2v-bash-completionUpgrade nbdkit-develUpgrade qemu-kvm-block-glusterUpgrade libiscsi-develUpgrade nbdkit-basic-pluginsUpgrade nbdkit-linuxdisk-pluginUpgrade libtpms-develUpgrade libvirt-daemon-config-networkUpgrade qemu-kvm-coreUpgrade qemu-kvm-docsUpgrade libiscsi-utilsUpgrade qemu-kvm-block-blkioUpgrade python3-libguestfsUpgrade qemu-kvm-device-display-virtio-gpuUpgrade nbdkit-tar-pluginUpgrade libvirt-daemon-driver-nodedevUpgrade qemu-kvm-device-usb-hostUpgrade hivex-develUpgrade libvirt-daemon-kvmUpgrade libvirt-nssUpgrade libguestfs-rescueUpgrade libtpmsUpgrade nbdkit-gzip-pluginUpgrade qemu-kvm-block-curlUpgrade libvirt-daemon-driver-nwfilterUpgrade lua-guestfsUpgrade libvirt-daemon-driver-networkUpgrade supermin-develUpgrade nbdkit-basic-filtersUpgrade python3-libnbdUpgrade libvirtUpgrade python3-libvirtUpgrade qemu-kvmUpgrade swtpm-toolsUpgrade libguestfs-man-pages-ukUpgrade swtpm-libsUpgrade libvirt-lock-sanlockUpgrade libguestfsUpgrade libguestfs-javadocUpgrade qemu-kvm-toolsUpgrade libvirt-wiresharkUpgrade seabiosUpgrade libiscsiUpgrade libvirt-daemonUpgrade libguestfs-gobject-develUpgrade libvirt-clientUpgrade libnbd-develUpgrade qemu-guest-agentUpgrade qemu-kvm-ui-egl-headlessUpgrade libguestfs-inspect-iconsUpgrade libguestfs-winsupportUpgrade libvirt-daemon-driver-storage-glusterUpgrade nbdfuseUpgrade nbdkit-gzip-filterUpgrade libguestfs-gobjectUpgrade perl-Sys-GuestfsUpgrade swtpm-tools-pkcs11Upgrade libguestfs-bash-completionUpgrade libvirt-daemon-driver-secretUpgrade libguestfs-xfsUpgrade qemu-kvm-commonUpgrade libvirt-libsUpgrade python3-hivexUpgrade virt-v2v-man-pages-ukUpgrade perl-hivexUpgrade nbdkit-example-pluginsUpgrade nbdkitUpgrade qemu-kvm-device-display-virtio-vgaUpgrade libguestfs-java-develUpgrade ruby-hivexUpgrade qemu-kvm-ui-openglUpgrade libnbd-bash-completionUpgrade libguestfs-toolsUpgrade superminUpgrade qemu-kvm-device-usb-redirectUpgrade nbdkit-python-pluginUpgrade libvirt-dbusUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libnbdUpgrade qemu-kvm-device-display-virtio-gpu-pciUpgrade virt-v2v-man-pages-jaUpgrade virt-dibUpgrade sgabiosUpgrade libguestfs-rsyncUpgrade qemu-virtiofsdUpgrade libvirt-daemon-driver-interfaceUpgrade nbdkit-serverUpgrade nbdkit-vddk-pluginUpgrade nbdkit-bash-completionUpgrade libvirt-daemon-config-nwfilterUpgrade qemu-imgUpgrade perl-Sys-VirtUpgrade virt-v2vUpgrade swtpm-develUpgrade netcf-develUpgrade libvirt-develUpgrade libguestfs-develUpgrade netcfUpgrade nbdkit-tar-filterUpgrade libguestfs-man-pages-jaUpgrade hivexUpgrade qemu-kvm-audio-paUpgrade nbdkit-nbd-pluginUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade libvirt-daemon-driver-storage-coreUpgrade libvirt-daemon-driver-storage-logicalUpgrade qemu-pr-helperUpgrade qemu-kvm-block-iscsiUpgrade sgabios-binUpgrade seavgabios-binUpgrade nbdkit-ssh-pluginUpgrade nbdkit-curl-pluginUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-driver-storageUpgrade libguestfs-tools-cUpgrade libguestfs-javaUpgrade libguestfs-gfs2Upgrade qemu-kvm-block-sshUpgrade nbdkit-tmpdisk-pluginUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-docsUpgrade libvirt-daemon-driver-storage-scsiUpgrade swtpmUpgrade qemu-kvm-block-rbd | Oct 16, 2024 | Apr 8, 2024 |
| Redhat_linux | — | Upgrade qemu-kvm-block-curlUpgrade qemu-kvm-device-display-virtio-gpu-pciUpgrade qemu-kvm-debuginfoUpgrade qemu-kvm-tests-debuginfoUpgrade qemu-guest-agent-debuginfoUpgrade qemu-kvm-device-usb-redirect-debuginfoUpgrade qemu-kvm-audio-dbus-debuginfoUpgrade qemu-kvm-device-usb-host-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-debuginfoUpgrade qemu-guest-agentUpgrade qemu-kvm-block-curl-debuginfoUpgrade qemu-kvm-block-rbdUpgrade qemu-pr-helperUpgrade qemu-kvm-debugsourceUpgrade qemu-pr-helper-debuginfoUpgrade qemu-kvm-audio-paUpgrade qemu-kvm-device-display-virtio-gpuUpgrade qemu-kvm-block-blkio-debuginfoUpgrade qemu-kvm-coreUpgrade qemu-kvmUpgrade qemu-kvm-device-display-virtio-gpu-ccw-debuginfoUpgrade qemu-kvm-audio-pa-debuginfoUpgrade qemu-kvm-commonUpgrade qemu-imgUpgrade qemu-kvm-ui-opengl-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-ccwUpgrade qemu-kvm-device-display-virtio-vga-debuginfoUpgrade qemu-kvm-docsUpgrade qemu-kvm-device-usb-redirectUpgrade qemu-kvm-block-blkioUpgrade qemu-kvm-ui-egl-headless-debuginfoUpgrade qemu-kvm-device-display-virtio-vgaUpgrade qemu-kvm-ui-openglUpgrade qemu-kvm-tools-debuginfoUpgrade qemu-kvm-toolsUpgrade qemu-kvm-ui-egl-headlessUpgrade qemu-kvm-device-usb-hostUpgrade qemu-img-debuginfoUpgrade qemu-kvm-core-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-pci-debuginfoUpgrade qemu-kvm-common-debuginfoUpgrade qemu-kvm-ui-dbus-debuginfoUpgrade qemu-kvm-block-rbd-debuginfo | May 7, 2025 | Apr 10, 2024 |
| Rocky_linux | — | Upgrade qemu-img-debuginfoUpgrade qemu-kvm-audio-paUpgrade qemu-kvm-ui-egl-headlessUpgrade qemu-kvm-device-usb-redirectUpgrade qemu-kvm-device-usb-redirect-debuginfoUpgrade qemu-kvm-block-curlUpgrade qemu-kvm-common-debuginfoUpgrade qemu-pr-helperUpgrade qemu-kvm-device-usb-host-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-debuginfoUpgrade qemu-pr-helper-debuginfoUpgrade qemu-kvm-ui-egl-headless-debuginfoUpgrade qemu-guest-agentUpgrade qemu-kvm-block-rbdUpgrade qemu-kvm-device-display-virtio-gpu-ccwUpgrade qemu-kvm-device-display-virtio-gpu-pciUpgrade qemu-kvm-debuginfoUpgrade qemu-kvm-device-display-virtio-gpuUpgrade qemu-kvm-device-display-virtio-vgaUpgrade qemu-guest-agent-debuginfoUpgrade qemu-kvm-block-curl-debuginfoUpgrade qemu-kvm-block-blkioUpgrade qemu-kvm-debugsourceUpgrade qemu-kvm-device-display-virtio-gpu-ccw-debuginfoUpgrade qemu-kvm-docsUpgrade qemu-kvmUpgrade qemu-kvm-toolsUpgrade qemu-kvm-coreUpgrade qemu-kvm-commonUpgrade qemu-kvm-ui-openglUpgrade qemu-imgUpgrade qemu-kvm-device-display-virtio-gpu-pci-debuginfoUpgrade qemu-kvm-device-usb-hostUpgrade qemu-kvm-tools-debuginfoUpgrade qemu-kvm-core-debuginfoUpgrade qemu-kvm-audio-pa-debuginfoUpgrade qemu-kvm-block-blkio-debuginfoUpgrade qemu-kvm-device-display-virtio-vga-debuginfoUpgrade qemu-kvm-block-rbd-debuginfoUpgrade qemu-kvm-ui-opengl-debuginfo | Jul 31, 2025 | Jul 29, 2025 |
| Suse | — | Upgrade qemu-imgUpgrade qemu-audio-pipewireUpgrade qemu-SLOFUpgrade qemu-microvmUpgrade qemu-audio-paUpgrade qemu-ui-dbusUpgrade qemu-x86Upgrade qemu-docUpgrade qemu-hw-display-qxlUpgrade qemu-block-nfsUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-hw-usb-smartcardUpgrade qemu-ui-cursesUpgrade qemu-chardev-baumUpgrade qemu-block-dmgUpgrade qemu-ivshmem-toolsUpgrade qemu-vgabiosUpgrade qemu-audio-ossUpgrade qemu-vmsr-helperUpgrade qemu-hw-usb-hostUpgrade qemu-linux-userUpgrade qemuUpgrade qemu-audio-dbusUpgrade qemu-vhost-user-gpuUpgrade qemu-toolsUpgrade qemu-pr-helperUpgrade qemu-spiceUpgrade qemu-block-iscsiUpgrade qemu-audio-jackUpgrade qemu-block-sshUpgrade qemu-audio-spiceUpgrade qemu-s390xUpgrade qemu-ui-spice-appUpgrade qemu-accel-tcg-x86Upgrade qemu-block-rbdUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-ui-openglUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-ui-spice-coreUpgrade qemu-headlessUpgrade qemu-audio-alsaUpgrade qemu-guest-agentUpgrade qemu-armUpgrade qemu-seabiosUpgrade qemu-langUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-chardev-spiceUpgrade qemu-hw-usb-redirectUpgrade qemu-skibootUpgrade qemu-ui-gtkUpgrade qemu-ksmUpgrade qemu-ipxeUpgrade qemu-extraUpgrade qemu-block-curlUpgrade qemu-ppc | Oct 31, 2024 | Apr 10, 2024 |
| Ubuntu | — | Upgrade qemu-system-ppcUpgrade qemu-system-armUpgrade qemu-system-x86Upgrade qemu-system-sparcUpgrade qemu-system-miscUpgrade qemu-system-xenUpgrade qemu-system-mipsUpgrade qemu-system-x86-microvmUpgrade qemu-system-x86-xenUpgrade qemu-system-s390xUpgrade qemu-system | Nov 19, 2024 | Apr 10, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub