A use-after-free vulnerability was found in the QEMU LSI53C895A SCSI Host Bus Adapter emulation. This issue can lead to a crash or VM escape.
CVSS Details
- CVSS 3.1 Base Score: 8.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade qemu-audio-sdlUpgrade qemu-ui-sdlUpgrade qemu-kvm-coreUpgrade qemu-block-dmgUpgrade qemu-system-x86-coreUpgrade qemu-ui-cursesUpgrade qemu-imgUpgrade qemu-commonUpgrade qemu-system-aarch64Upgrade qemu-block-nfsUpgrade qemu-user-binfmtUpgrade qemuUpgrade qemu-user-staticUpgrade qemu-debuginfoUpgrade qemu-kvmUpgrade qemu-system-x86Upgrade qemu-audio-paUpgrade qemu-system-aarch64-coreUpgrade qemu-userUpgrade qemu-block-curlUpgrade qemu-audio-ossUpgrade qemu-block-iscsiUpgrade qemu-ui-gtkUpgrade qemu-guest-agentUpgrade ivshmem-toolsUpgrade qemu-block-sshUpgrade qemu-audio-alsaUpgrade qemu-block-rbd | Feb 5, 2025 | Oct 21, 2024 |
| Debian | — | No solution existsUpgrade qemu | May 15, 2025 | Oct 21, 2024 |
| Ubuntu | — | Upgrade qemu-system-miscUpgrade qemu-system-riscvUpgrade qemu-user-binfmt (Ubuntu Pro)Upgrade qemu-system-gui (Ubuntu Pro)Upgrade qemu-system-sparcUpgrade qemu-system-commonUpgrade qemu-system-armUpgrade qemu-system-xenUpgrade qemu-system-x86Upgrade qemu-guest-agent (Ubuntu Pro)Upgrade qemu-system-dataUpgrade qemuUpgrade qemu-utils (Ubuntu Pro)Upgrade qemu-system-guiUpgrade qemu-keymaps (Ubuntu Pro)Upgrade qemu-system (Ubuntu Pro)Upgrade qemu-user (Ubuntu Pro)Upgrade qemu-system-x86-xen (Ubuntu Pro)Upgrade qemu-system-common (Ubuntu Pro)Upgrade qemu-system-x86-xenUpgrade qemu-system-modules-openglUpgrade qemu-systemUpgrade qemu-system-sparc (Ubuntu Pro)Upgrade qemu-system-misc (Ubuntu Pro)Upgrade qemu-kvm (Ubuntu Pro)Upgrade qemu-system-mipsUpgrade qemu (Ubuntu Pro)Upgrade qemu-system-data (Ubuntu Pro)Upgrade qemu-system-mips (Ubuntu Pro)Upgrade qemu-system-ppc (Ubuntu Pro)Upgrade qemu-system-modules-spiceUpgrade qemu-system-x86 (Ubuntu Pro)Upgrade qemu-system-s390x (Ubuntu Pro)Upgrade qemu-system-ppcUpgrade qemu-system-s390xUpgrade qemu-system-aarch64 (Ubuntu Pro)Upgrade qemu-system-arm (Ubuntu Pro)Upgrade qemu-block-extra (Ubuntu Pro)Upgrade qemu-system-x86-microvmUpgrade qemu-system-x86-microvm (Ubuntu Pro)Upgrade qemu-common (Ubuntu Pro) | Jun 26, 2025 | Oct 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub