A use-after-free vulnerability was found in the QEMU LSI53C895A SCSI Host Bus Adapter emulation. This issue can lead to a crash or VM escape.
CVSS Details
- CVSS 3.1 Base Score: 8.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade qemu-system-x86-coreUpgrade qemu-ui-cursesUpgrade qemu-debuginfoUpgrade qemuUpgrade qemu-imgUpgrade qemu-block-dmgUpgrade qemu-commonUpgrade qemu-system-aarch64Upgrade qemu-block-nfsUpgrade qemu-kvmUpgrade qemu-audio-sdlUpgrade qemu-ui-sdlUpgrade qemu-kvm-coreUpgrade qemu-user-staticUpgrade qemu-user-binfmtUpgrade qemu-system-aarch64-coreUpgrade qemu-system-x86Upgrade qemu-guest-agentUpgrade ivshmem-toolsUpgrade qemu-block-iscsiUpgrade qemu-audio-alsaUpgrade qemu-ui-gtkUpgrade qemu-block-rbdUpgrade qemu-userUpgrade qemu-block-curlUpgrade qemu-audio-paUpgrade qemu-audio-ossUpgrade qemu-block-ssh | Feb 5, 2025 | Oct 21, 2024 |
| Debian | — | Upgrade qemu | May 15, 2025 | Oct 21, 2024 |
| Ubuntu | — | Upgrade qemu-system-x86-xenUpgrade qemu-block-extra (Ubuntu Pro)Upgrade qemu-system-aarch64 (Ubuntu Pro)Upgrade qemu-user-static (Ubuntu Pro)Upgrade qemu-system-dataUpgrade qemu-system-common (Ubuntu Pro)Upgrade qemu-user-binfmt (Ubuntu Pro)Upgrade qemu-system-miscUpgrade qemuUpgrade qemu-system-x86Upgrade qemu-utils (Ubuntu Pro)Upgrade qemu-system-commonUpgrade qemu-guest-agent (Ubuntu Pro)Upgrade qemu-system-xenUpgrade qemu-system-sparcUpgrade qemu-system-gui (Ubuntu Pro)Upgrade qemu-user (Ubuntu Pro)Upgrade qemu-keymaps (Ubuntu Pro)Upgrade qemu-system-x86-xen (Ubuntu Pro)Upgrade qemu-system-armUpgrade qemu-system-s390xUpgrade qemu-kvm (Ubuntu Pro)Upgrade qemu-system-modules-openglUpgrade qemu-systemUpgrade qemu-system-mipsUpgrade qemu-system-misc (Ubuntu Pro)Upgrade qemu (Ubuntu Pro)Upgrade qemu-system-x86 (Ubuntu Pro)Upgrade qemu-system-arm (Ubuntu Pro)Upgrade qemu-system-data (Ubuntu Pro)Upgrade qemu-system-ppc (Ubuntu Pro)Upgrade qemu-system-x86-microvm (Ubuntu Pro)Upgrade qemu-system-s390x (Ubuntu Pro)Upgrade qemu-system-mips (Ubuntu Pro)Upgrade qemu-common (Ubuntu Pro)Upgrade qemu-system-sparc (Ubuntu Pro)Upgrade qemu-system-modules-spiceUpgrade qemu-system-ppcUpgrade qemu-system-x86-microvm | Jun 26, 2025 | Oct 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub