A flaw was found in the QEMU Virtio PCI Bindings (hw/virtio/virtio-pci.c). An improper release and use of the irqfd for vector 0 during the boot process leads to a guest triggerable crash via vhost_net_stop(). This flaw allows a malicious guest to crash the QEMU process on the host.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Jul 27, 2026 | Jul 27, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 14, 2024 |
| Suse | — | Upgrade qemu-SLOFUpgrade qemu-block-nfsUpgrade qemu-ui-cursesUpgrade qemu-x86Upgrade qemu-hw-display-qxlUpgrade qemu-block-dmgUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-hw-usb-smartcardUpgrade qemuUpgrade qemu-audio-pipewireUpgrade qemu-ivshmem-toolsUpgrade qemu-block-glusterUpgrade qemu-docUpgrade qemu-imgUpgrade qemu-linux-userUpgrade qemu-ui-dbusUpgrade qemu-vgabiosUpgrade qemu-chardev-baumUpgrade qemu-audio-paUpgrade qemu-extraUpgrade qemu-toolsUpgrade qemu-microvmUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-hw-usb-hostUpgrade qemu-ui-gtkUpgrade qemu-accel-qtestUpgrade qemu-ipxeUpgrade qemu-block-iscsiUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-s390xUpgrade qemu-block-rbdUpgrade qemu-accel-tcg-x86Upgrade qemu-ppcUpgrade qemu-block-sshUpgrade qemu-langUpgrade qemu-ui-spice-coreUpgrade qemu-ui-spice-appUpgrade qemu-skibootUpgrade qemu-audio-jackUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-headlessUpgrade qemu-guest-agentUpgrade qemu-spiceUpgrade qemu-audio-alsaUpgrade qemu-chardev-spiceUpgrade qemu-hw-usb-redirectUpgrade qemu-audio-spiceUpgrade qemu-audio-dbusUpgrade qemu-ui-openglUpgrade qemu-block-curlUpgrade qemu-vhost-user-gpuUpgrade qemu-seabiosUpgrade qemu-pr-helperUpgrade qemu-ksmUpgrade qemu-arm | Nov 29, 2024 | May 14, 2024 |
| Ubuntu | — | Upgrade qemu-system-mipsUpgrade qemu-system-sparc (Ubuntu Pro)Upgrade qemu-system-mips (Ubuntu Pro)Upgrade qemu-system-xenUpgrade qemu-system-miscUpgrade qemu-system-aarch64 (Ubuntu Pro)Upgrade qemu-system-common (Ubuntu Pro)Upgrade qemu-system-x86 (Ubuntu Pro)Upgrade qemu-system-sparcUpgrade qemu-system-s390xUpgrade qemuUpgrade qemu-system-armUpgrade qemu-system-s390x (Ubuntu Pro)Upgrade qemu-systemUpgrade qemu-system-x86-xenUpgrade qemu-system-ppc (Ubuntu Pro)Upgrade qemu-system-x86Upgrade qemu-system-ppcUpgrade qemu (Ubuntu Pro)Upgrade qemu-system-misc (Ubuntu Pro)Upgrade qemu-system (Ubuntu Pro)Upgrade qemu-system-arm (Ubuntu Pro)Upgrade qemu-system-x86-microvm | Nov 11, 2024 | May 14, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub