A flaw was found in the QEMU Virtio PCI Bindings (hw/virtio/virtio-pci.c). An improper release and use of the irqfd for vector 0 during the boot process leads to a guest triggerable crash via vhost_net_stop(). This flaw allows a malicious guest to crash the QEMU process on the host.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade qemu | Jul 27, 2026 | Jul 27, 2026 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | May 14, 2024 |
| Suse | — | Upgrade qemu-seabiosUpgrade qemu-vhost-user-gpuUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-ipxeUpgrade qemu-ksmUpgrade qemu-audio-jackUpgrade qemu-block-iscsiUpgrade qemu-accel-qtestUpgrade qemu-pr-helperUpgrade qemu-armUpgrade qemu-ui-openglUpgrade qemu-headlessUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-block-curlUpgrade qemu-audio-dbusUpgrade qemu-s390xUpgrade qemu-ui-spice-appUpgrade qemu-ppcUpgrade qemu-skibootUpgrade qemu-langUpgrade qemu-ui-spice-coreUpgrade qemu-block-sshUpgrade qemu-accel-tcg-x86Upgrade qemu-block-rbdUpgrade qemu-ui-gtkUpgrade qemu-audio-alsaUpgrade qemu-chardev-spiceUpgrade qemu-spiceUpgrade qemu-audio-spiceUpgrade qemu-hw-usb-redirectUpgrade qemu-guest-agentUpgrade qemu-extraUpgrade qemu-audio-paUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-hw-usb-hostUpgrade qemu-block-glusterUpgrade qemu-microvmUpgrade qemu-toolsUpgrade qemu-x86Upgrade qemu-ui-cursesUpgrade qemu-block-dmgUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-hw-usb-smartcardUpgrade qemu-hw-display-qxlUpgrade qemu-linux-userUpgrade qemu-imgUpgrade qemu-chardev-baumUpgrade qemu-vgabiosUpgrade qemu-docUpgrade qemu-SLOFUpgrade qemu-block-nfsUpgrade qemu-ui-dbusUpgrade qemuUpgrade qemu-ivshmem-toolsUpgrade qemu-audio-pipewire | Nov 29, 2024 | May 14, 2024 |
| Ubuntu | — | Upgrade qemu-system-aarch64 (Ubuntu Pro)Upgrade qemu-system-xenUpgrade qemu-system-mips (Ubuntu Pro)Upgrade qemu-system-miscUpgrade qemu-system-sparc (Ubuntu Pro)Upgrade qemu-system-x86 (Ubuntu Pro)Upgrade qemu-system-common (Ubuntu Pro)Upgrade qemu-system-mipsUpgrade qemu-system-sparcUpgrade qemu-system-s390x (Ubuntu Pro)Upgrade qemu-system (Ubuntu Pro)Upgrade qemu-system-ppcUpgrade qemu-systemUpgrade qemuUpgrade qemu-system-x86-microvmUpgrade qemu-system-x86-xenUpgrade qemu (Ubuntu Pro)Upgrade qemu-system-misc (Ubuntu Pro)Upgrade qemu-system-x86Upgrade qemu-system-s390xUpgrade qemu-system-ppc (Ubuntu Pro)Upgrade qemu-system-arm (Ubuntu Pro)Upgrade qemu-system-arm | Nov 11, 2024 | May 14, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub