A flaw was found in QEMU. An assertion failure was present in the usb_ep_get() function in hw/net/core.c when trying to get the USB endpoint from a USB device. This flaw may allow a malicious unprivileged guest user to crash the QEMU process on the host and cause a denial of service condition.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade qemu-audio-alsaUpgrade qemu-userUpgrade qemu-audio-sdlUpgrade qemu-block-rbdUpgrade qemu-block-iscsiUpgrade qemu-audio-ossUpgrade qemu-guest-agentUpgrade qemu-block-sshUpgrade qemu-block-curlUpgrade qemu-ui-gtkUpgrade qemu-system-aarch64-coreUpgrade ivshmem-toolsUpgrade qemu-debuginfoUpgrade qemu-system-aarch64Upgrade qemu-kvmUpgrade qemu-commonUpgrade qemu-audio-paUpgrade qemu-ui-sdlUpgrade qemu-kvm-coreUpgrade qemu-block-dmgUpgrade qemu-system-x86Upgrade qemu-block-nfsUpgrade qemu-user-binfmtUpgrade qemu-ui-cursesUpgrade qemuUpgrade qemu-user-staticUpgrade qemu-imgUpgrade qemu-system-x86-core | May 20, 2026 | May 20, 2026 |
| Debian | — | No solution exists | May 15, 2025 | Sep 19, 2024 |
| Oracle_linux | — | Upgrade sgabiosUpgrade libguestfs-bash-completionUpgrade nbdkit-basic-filtersUpgrade python3-libnbdUpgrade nbdkit-python-pluginUpgrade qemu-kvm-block-rbdUpgrade libguestfs-gobject-develUpgrade qemu-guest-agentUpgrade libguestfs-xfsUpgrade libvirt-clientUpgrade libvirt-daemon-driver-nodedevUpgrade libvirt-daemon-driver-networkUpgrade seabiosUpgrade libguestfs-javadocUpgrade qemu-kvm-device-usb-hostUpgrade libvirt-daemon-driver-storage-glusterUpgrade nbdkit-tar-pluginUpgrade libguestfs-applianceUpgrade libnbd-develUpgrade swtpm-libsUpgrade nbdkit-basic-pluginsUpgrade libvirt-daemonUpgrade libvirt-daemon-driver-qemuUpgrade supermin-develUpgrade libguestfs-toolsUpgrade libguestfs-inspect-iconsUpgrade libiscsi-develUpgrade nbdkit-tar-filterUpgrade qemu-kvm-block-curlUpgrade virt-v2v-bash-completionUpgrade superminUpgrade python3-libguestfsUpgrade nbdkit-xz-filterUpgrade python3-hivexUpgrade lua-guestfsUpgrade nbdkit-serverUpgrade perl-Sys-GuestfsUpgrade qemu-kvmUpgrade libiscsi-utilsUpgrade virt-v2vUpgrade libvirt-lock-sanlockUpgrade libguestfs-man-pages-ukUpgrade libvirt-nssUpgrade libguestfs-winsupportUpgrade libvirtUpgrade libvirt-daemon-driver-storage-coreUpgrade libguestfs-rescueUpgrade libtpmsUpgrade virt-v2v-man-pages-jaUpgrade nbdkit-vddk-pluginUpgrade qemu-kvm-block-glusterUpgrade qemu-kvm-block-sshUpgrade swtpm-toolsUpgrade qemu-kvm-commonUpgrade nbdkit-develUpgrade virt-v2v-man-pages-ukUpgrade libvirt-client-qemuUpgrade libvirt-daemon-driver-secretUpgrade libnbdUpgrade libguestfs-develUpgrade virt-dibUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-interfaceUpgrade hivexUpgrade seabios-binUpgrade nbdkit-nbd-pluginUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-config-networkUpgrade hivex-develUpgrade nbdkit-gzip-pluginUpgrade ruby-libguestfsUpgrade nbdkit-gzip-filterUpgrade nbdkit-bash-completionUpgrade libvirt-daemon-driver-nwfilterUpgrade libiscsiUpgrade libguestfs-javaUpgrade nbdkit-curl-pluginUpgrade libvirt-develUpgrade libvirt-daemon-driver-storage-logicalUpgrade nbdkit-ssh-pluginUpgrade qemu-virtiofsdUpgrade libguestfsUpgrade swtpm-develUpgrade perl-Sys-VirtUpgrade libvirt-docsUpgrade libvirt-daemon-kvmUpgrade perl-hivexUpgrade netcf-develUpgrade libvirt-daemon-config-nwfilterUpgrade libnbd-bash-completionUpgrade libguestfs-rsyncUpgrade libguestfs-gobjectUpgrade seavgabios-binUpgrade nbdkit-tmpdisk-pluginUpgrade netcfUpgrade nbdkit-linuxdisk-pluginUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade libvirt-daemon-driver-storage-iscsiUpgrade libguestfs-gfs2Upgrade qemu-imgUpgrade netcf-libsUpgrade libvirt-libsUpgrade qemu-kvm-block-iscsiUpgrade nbdkit-example-pluginsUpgrade libvirt-dbusUpgrade libtpms-develUpgrade libvirt-daemon-driver-storage-scsiUpgrade libguestfs-tools-cUpgrade libguestfs-man-pages-jaUpgrade sgabios-binUpgrade ruby-hivexUpgrade python3-libvirtUpgrade nbdfuseUpgrade libvirt-wiresharkUpgrade swtpm-tools-pkcs11Upgrade nbdkitUpgrade qemu-kvm-coreUpgrade swtpmUpgrade libvirt-daemon-driver-storageUpgrade libguestfs-java-develUpgrade libvirt-daemon-driver-storage-disk | Feb 26, 2026 | Aug 30, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 19, 2024 |
| Suse | — | Upgrade qemu-docUpgrade qemu-pr-helperUpgrade qemu-skibootUpgrade qemu-ui-gtkUpgrade qemu-ui-cursesUpgrade qemu-audio-pipewireUpgrade qemu-block-dmgUpgrade qemu-block-iscsiUpgrade qemu-spiceUpgrade qemu-audio-alsaUpgrade qemu-accel-tcg-x86Upgrade qemu-block-curlUpgrade qemu-ui-spice-coreUpgrade qemu-block-glusterUpgrade qemu-seabiosUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-accel-qtestUpgrade qemu-hw-usb-redirectUpgrade qemu-audio-paUpgrade qemu-ksmUpgrade qemu-imgUpgrade qemu-ui-openglUpgrade qemu-linux-userUpgrade qemu-ui-spice-appUpgrade qemu-armUpgrade qemu-chardev-spiceUpgrade qemu-hw-usb-smartcardUpgrade qemu-audio-dbusUpgrade qemu-langUpgrade qemu-SLOFUpgrade qemu-ipxeUpgrade qemu-audio-spiceUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-vhost-user-gpuUpgrade qemu-toolsUpgrade qemu-microvmUpgrade qemuUpgrade qemu-vgabiosUpgrade qemu-sgabiosUpgrade qemu-block-sshUpgrade qemu-block-nfsUpgrade qemu-hw-display-qxlUpgrade qemu-guest-agentUpgrade qemu-hw-usb-hostUpgrade qemu-ivshmem-toolsUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-ui-dbusUpgrade qemu-block-rbdUpgrade qemu-headlessUpgrade qemu-chardev-baumUpgrade qemu-s390xUpgrade qemu-ppcUpgrade qemu-kvmUpgrade qemu-x86Upgrade qemu-extraUpgrade qemu-audio-jack | Dec 31, 2024 | Sep 19, 2024 |
| Ubuntu | — | Upgrade qemu-system-modules-openglUpgrade qemu-system-x86-microvmUpgrade qemu-system-mipsUpgrade qemu-kvm (Ubuntu Pro)Upgrade qemu-system-ppc (Ubuntu Pro)Upgrade qemu-system-x86 (Ubuntu Pro)Upgrade qemu-system-x86-xenUpgrade qemu-system-misc (Ubuntu Pro)Upgrade qemu-systemUpgrade qemu (Ubuntu Pro)Upgrade qemu-system-s390xUpgrade qemu-user-static (Ubuntu Pro)Upgrade qemu-system-arm (Ubuntu Pro)Upgrade qemu-system-mips (Ubuntu Pro)Upgrade qemu-system-data (Ubuntu Pro)Upgrade qemu-system-modules-spiceUpgrade qemu-system-sparc (Ubuntu Pro)Upgrade qemu-system-x86-microvm (Ubuntu Pro)Upgrade qemu-common (Ubuntu Pro)Upgrade qemu-system-aarch64 (Ubuntu Pro)Upgrade qemu-block-extra (Ubuntu Pro)Upgrade qemu-system-s390x (Ubuntu Pro)Upgrade qemu-system-guiUpgrade qemu-system-armUpgrade qemu-system-x86Upgrade qemu-utils (Ubuntu Pro)Upgrade qemu-guest-agent (Ubuntu Pro)Upgrade qemu-keymaps (Ubuntu Pro)Upgrade qemu-system (Ubuntu Pro)Upgrade qemu-system-common (Ubuntu Pro)Upgrade qemuUpgrade qemu-system-x86-xen (Ubuntu Pro)Upgrade qemu-user (Ubuntu Pro)Upgrade qemu-system-miscUpgrade qemu-system-dataUpgrade qemu-system-xenUpgrade qemu-system-ppcUpgrade qemu-user-binfmt (Ubuntu Pro)Upgrade qemu-system-sparcUpgrade qemu-system-riscvUpgrade qemu-system-gui (Ubuntu Pro)Upgrade qemu-system-common | Jun 26, 2025 | Sep 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub