A flaw was found in QEMU. An assertion failure was present in the usb_ep_get() function in hw/net/core.c when trying to get the USB endpoint from a USB device. This flaw may allow a malicious unprivileged guest user to crash the QEMU process on the host and cause a denial of service condition.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade qemu-block-rbdUpgrade qemu-userUpgrade qemu-audio-alsaUpgrade qemu-block-iscsiUpgrade qemu-block-curlUpgrade qemu-guest-agentUpgrade qemu-audio-ossUpgrade qemu-block-sshUpgrade qemu-system-aarch64-coreUpgrade qemu-ui-gtkUpgrade ivshmem-toolsUpgrade qemu-audio-sdlUpgrade qemu-system-x86Upgrade qemu-ui-sdlUpgrade qemu-audio-paUpgrade qemuUpgrade qemu-commonUpgrade qemu-kvmUpgrade qemu-block-dmgUpgrade qemu-block-nfsUpgrade qemu-debuginfoUpgrade qemu-system-x86-coreUpgrade qemu-kvm-coreUpgrade qemu-ui-cursesUpgrade qemu-user-staticUpgrade qemu-system-aarch64Upgrade qemu-imgUpgrade qemu-user-binfmt | May 20, 2026 | May 20, 2026 |
| Debian | — | No solution exists | May 15, 2025 | Sep 19, 2024 |
| Oracle_linux | — | Upgrade seavgabios-binUpgrade nbdkit-gzip-filterUpgrade nbdkit-curl-pluginUpgrade nbdkit-bash-completionUpgrade libiscsiUpgrade swtpm-tools-pkcs11Upgrade qemu-virtiofsdUpgrade libvirt-daemon-driver-storageUpgrade hivexUpgrade virt-v2v-man-pages-ukUpgrade seabios-binUpgrade libvirt-wiresharkUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-daemon-driver-storage-scsiUpgrade libvirt-daemon-driver-interfaceUpgrade libtpms-develUpgrade libguestfs-tools-cUpgrade sgabios-binUpgrade ruby-hivexUpgrade python3-libvirtUpgrade libguestfs-man-pages-jaUpgrade nbdfuseUpgrade libvirt-daemon-driver-storage-logicalUpgrade nbdkitUpgrade libvirt-daemon-driver-storage-diskUpgrade libvirt-daemon-kvmUpgrade perl-hivexUpgrade netcf-develUpgrade libguestfs-gobjectUpgrade libnbd-bash-completionUpgrade libguestfs-rsyncUpgrade virt-dibUpgrade qemu-kvm-block-iscsiUpgrade nbdkit-example-pluginsUpgrade libvirt-daemon-driver-secretUpgrade libnbdUpgrade libguestfs-develUpgrade libvirt-docsUpgrade perl-Sys-VirtUpgrade libvirt-daemon-config-nwfilterUpgrade libvirt-dbusUpgrade libvirt-client-qemuUpgrade hivex-develUpgrade libvirt-develUpgrade nbdkit-gzip-pluginUpgrade nbdkit-nbd-pluginUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-config-networkUpgrade netcfUpgrade libguestfsUpgrade swtpm-develUpgrade qemu-imgUpgrade nbdkit-tmpdisk-pluginUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade nbdkit-linuxdisk-pluginUpgrade libvirt-daemon-driver-storage-iscsiUpgrade netcf-libsUpgrade libguestfs-gfs2Upgrade swtpmUpgrade libvirt-libsUpgrade libguestfs-java-develUpgrade nbdkit-ssh-pluginUpgrade qemu-kvm-coreUpgrade libvirt-daemon-driver-nwfilterUpgrade ruby-libguestfsUpgrade libguestfs-javaUpgrade nbdkit-python-pluginUpgrade qemu-kvm-block-rbdUpgrade libvirt-daemon-driver-storage-glusterUpgrade libvirt-daemon-driver-nodedevUpgrade libguestfs-inspect-iconsUpgrade swtpm-libsUpgrade libvirt-daemon-driver-qemuUpgrade libnbd-develUpgrade libguestfs-xfsUpgrade libguestfs-gobject-develUpgrade seabiosUpgrade lua-guestfsUpgrade perl-Sys-GuestfsUpgrade libguestfs-applianceUpgrade sgabiosUpgrade nbdkit-tar-pluginUpgrade nbdkit-basic-filtersUpgrade nbdkit-basic-pluginsUpgrade superminUpgrade nbdkit-tar-filterUpgrade libvirt-clientUpgrade libguestfs-bash-completionUpgrade libvirt-daemon-driver-networkUpgrade libvirtUpgrade qemu-kvm-block-glusterUpgrade libguestfs-winsupportUpgrade swtpm-toolsUpgrade qemu-kvm-block-sshUpgrade nbdkit-develUpgrade libvirt-nssUpgrade libvirt-daemon-driver-storage-coreUpgrade nbdkit-vddk-pluginUpgrade virt-v2v-man-pages-jaUpgrade libtpmsUpgrade libguestfs-rescueUpgrade qemu-kvm-commonUpgrade libvirt-daemonUpgrade libguestfs-javadocUpgrade qemu-kvm-device-usb-hostUpgrade qemu-kvmUpgrade nbdkit-xz-filterUpgrade libvirt-lock-sanlockUpgrade virt-v2vUpgrade libiscsi-utilsUpgrade libguestfs-man-pages-ukUpgrade virt-v2v-bash-completionUpgrade qemu-guest-agentUpgrade python3-libnbdUpgrade supermin-develUpgrade qemu-kvm-block-curlUpgrade python3-libguestfsUpgrade python3-hivexUpgrade nbdkit-serverUpgrade libiscsi-develUpgrade libguestfs-tools | Feb 26, 2026 | Aug 30, 2024 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Sep 19, 2024 |
| Suse | — | Upgrade qemu-block-nfsUpgrade qemu-ivshmem-toolsUpgrade qemu-audio-spiceUpgrade qemu-audio-jackUpgrade qemu-block-sshUpgrade qemu-ui-dbusUpgrade qemu-kvmUpgrade qemu-headlessUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-block-rbdUpgrade qemu-ppcUpgrade qemu-toolsUpgrade qemu-microvmUpgrade qemu-vhost-user-gpuUpgrade qemu-ipxeUpgrade qemu-langUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-audio-dbusUpgrade qemu-hw-usb-smartcardUpgrade qemu-sgabiosUpgrade qemu-vgabiosUpgrade qemu-x86Upgrade qemu-hw-display-virtio-gpuUpgrade qemu-s390xUpgrade qemuUpgrade qemu-SLOFUpgrade qemu-guest-agentUpgrade qemu-extraUpgrade qemu-chardev-baumUpgrade qemu-hw-display-qxlUpgrade qemu-hw-usb-hostUpgrade qemu-audio-alsaUpgrade qemu-skibootUpgrade qemu-audio-paUpgrade qemu-armUpgrade qemu-ksmUpgrade qemu-imgUpgrade qemu-linux-userUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-pr-helperUpgrade qemu-docUpgrade qemu-block-iscsiUpgrade qemu-block-curlUpgrade qemu-accel-tcg-x86Upgrade qemu-chardev-spiceUpgrade qemu-ui-openglUpgrade qemu-hw-usb-redirectUpgrade qemu-block-glusterUpgrade qemu-accel-qtestUpgrade qemu-seabiosUpgrade qemu-ui-gtkUpgrade qemu-ui-spice-coreUpgrade qemu-audio-pipewireUpgrade qemu-ui-cursesUpgrade qemu-ui-spice-appUpgrade qemu-spiceUpgrade qemu-block-dmg | Dec 31, 2024 | Sep 19, 2024 |
| Ubuntu | — | Upgrade qemu-guest-agent (Ubuntu Pro)Upgrade qemu-user-binfmt (Ubuntu Pro)Upgrade qemu-system-armUpgrade qemu-utils (Ubuntu Pro)Upgrade qemu-system-gui (Ubuntu Pro)Upgrade qemu-system-ppcUpgrade qemu-system-x86Upgrade qemu-system-x86 (Ubuntu Pro)Upgrade qemu-system-s390x (Ubuntu Pro)Upgrade qemu-system-s390xUpgrade qemu-system-misc (Ubuntu Pro)Upgrade qemu-kvm (Ubuntu Pro)Upgrade qemu-system-mips (Ubuntu Pro)Upgrade qemu-system-arm (Ubuntu Pro)Upgrade qemu-user-static (Ubuntu Pro)Upgrade qemu-block-extra (Ubuntu Pro)Upgrade qemu-system-aarch64 (Ubuntu Pro)Upgrade qemu-system-x86-microvmUpgrade qemu-system-ppc (Ubuntu Pro)Upgrade qemu-system-modules-openglUpgrade qemu-system-modules-spiceUpgrade qemu-system-mipsUpgrade qemu-system-x86-xenUpgrade qemu-common (Ubuntu Pro)Upgrade qemu-system-sparc (Ubuntu Pro)Upgrade qemu-system-data (Ubuntu Pro)Upgrade qemu (Ubuntu Pro)Upgrade qemu-system-x86-microvm (Ubuntu Pro)Upgrade qemu-systemUpgrade qemu-system-commonUpgrade qemu-user (Ubuntu Pro)Upgrade qemu-system-guiUpgrade qemu-system-dataUpgrade qemu-keymaps (Ubuntu Pro)Upgrade qemu-system (Ubuntu Pro)Upgrade qemu-system-xenUpgrade qemu-system-riscvUpgrade qemuUpgrade qemu-system-x86-xen (Ubuntu Pro)Upgrade qemu-system-miscUpgrade qemu-system-sparcUpgrade qemu-system-common (Ubuntu Pro) | Jun 26, 2025 | Sep 19, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub