An issue was discovered in QEMU 7.1.0 through 8.2.1. register_vfs in hw/pci/pcie_sriov.c mishandles the situation where a guest writes NumVFs greater than TotalVFs, leading to a buffer overflow in VF implementations.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade qemu-kvm-ui-openglUpgrade qemu-kvm-docsUpgrade qemu-kvm-device-display-virtio-gpu-pciUpgrade qemu-kvmUpgrade qemu-kvm-block-blkioUpgrade qemu-kvm-device-display-virtio-gpuUpgrade qemu-kvm-commonUpgrade qemu-pr-helperUpgrade qemu-kvm-device-usb-hostUpgrade qemu-kvm-device-display-virtio-vgaUpgrade qemu-kvm-device-usb-redirectUpgrade qemu-imgUpgrade qemu-kvm-coreUpgrade qemu-kvm-toolsUpgrade qemu-kvm-ui-egl-headlessUpgrade qemu-kvm-block-rbdUpgrade qemu-kvm-block-curlUpgrade qemu-kvm-device-display-virtio-gpu-ccwUpgrade qemu-kvm-audio-paUpgrade qemu-guest-agent | Nov 19, 2024 | Feb 19, 2024 |
| Debian | — | Upgrade qemu | Jul 30, 2024 | Feb 19, 2024 |
| Oracle_linux | — | Upgrade libtpmsUpgrade libvirt-daemon-driver-networkUpgrade perl-hivexUpgrade libguestfs-inspect-iconsUpgrade qemu-kvm-block-blkioUpgrade libvirt-daemon-driver-interfaceUpgrade netcf-develUpgrade libvirt-daemon-driver-storage-diskUpgrade nbdkit-tar-filterUpgrade libvirt-clientUpgrade qemu-kvm-coreUpgrade libvirt-nssUpgrade libguestfs-applianceUpgrade libguestfs-rescueUpgrade qemu-virtiofsdUpgrade virt-v2vUpgrade qemu-imgUpgrade qemu-kvm-docsUpgrade qemu-kvm-toolsUpgrade supermin-develUpgrade ruby-hivexUpgrade qemu-kvm-block-glusterUpgrade seavgabios-binUpgrade libguestfs-javadocUpgrade libiscsi-develUpgrade libguestfs-xfsUpgrade nbdkit-ssh-pluginUpgrade libvirt-client-qemuUpgrade qemu-kvm-ui-openglUpgrade nbdkit-develUpgrade libguestfs-gobject-develUpgrade lua-guestfsUpgrade nbdkit-python-pluginUpgrade nbdkit-tar-pluginUpgrade nbdkit-vddk-pluginUpgrade qemu-kvm-device-usb-hostUpgrade libguestfs-gobjectUpgrade nbdkit-basic-filtersUpgrade nbdkit-serverUpgrade swtpm-libsUpgrade libvirtUpgrade swtpm-develUpgrade libvirt-daemon-config-networkUpgrade qemu-kvmUpgrade libvirt-daemon-kvmUpgrade swtpm-tools-pkcs11Upgrade libvirt-daemon-driver-nodedevUpgrade ruby-libguestfsUpgrade superminUpgrade python3-libvirtUpgrade nbdkit-basic-pluginsUpgrade seabios-binUpgrade python3-libguestfsUpgrade libvirt-daemon-driver-nwfilterUpgrade perl-Sys-GuestfsUpgrade libguestfs-bash-completionUpgrade libvirt-daemon-driver-storage-iscsiUpgrade hivexUpgrade seabiosUpgrade libvirt-daemon-driver-storage-logicalUpgrade libvirt-daemon-driver-storage-rbdUpgrade libvirt-docsUpgrade libguestfs-toolsUpgrade libvirt-daemon-driver-secretUpgrade python3-hivexUpgrade python3-libnbdUpgrade libguestfs-gfs2Upgrade qemu-kvm-device-usb-redirectUpgrade libvirt-daemon-driver-qemuUpgrade qemu-kvm-commonUpgrade qemu-kvm-device-display-virtio-vgaUpgrade libvirt-daemon-driver-storage-iscsi-directUpgrade swtpmUpgrade qemu-kvm-block-sshUpgrade libvirt-wiresharkUpgrade libvirt-daemon-driver-storage-mpathUpgrade libvirt-daemon-config-nwfilterUpgrade libguestfsUpgrade nbdkit-linuxdisk-pluginUpgrade nbdkit-bash-completionUpgrade libguestfs-tools-cUpgrade libguestfs-java-develUpgrade nbdkit-tmpdisk-pluginUpgrade libvirt-daemon-driver-storage-scsiUpgrade libnbd-bash-completionUpgrade libnbdUpgrade libiscsi-utilsUpgrade libguestfs-man-pages-ukUpgrade virt-v2v-bash-completionUpgrade virt-v2v-man-pages-jaUpgrade swtpm-toolsUpgrade sgabiosUpgrade qemu-kvm-audio-paUpgrade qemu-guest-agentUpgrade nbdkit-example-pluginsUpgrade qemu-kvm-device-display-virtio-gpuUpgrade libvirt-dbusUpgrade libguestfs-javaUpgrade libtpms-develUpgrade nbdkit-curl-pluginUpgrade nbdfuseUpgrade nbdkit-xz-filterUpgrade qemu-kvm-device-display-virtio-gpu-pciUpgrade nbdkitUpgrade libvirt-lock-sanlockUpgrade libvirt-daemon-driver-storageUpgrade nbdkit-nbd-pluginUpgrade qemu-kvm-block-rbdUpgrade hivex-develUpgrade virt-v2v-man-pages-ukUpgrade libvirt-daemonUpgrade libiscsiUpgrade libguestfs-rsyncUpgrade qemu-kvm-block-curlUpgrade libvirt-libsUpgrade libguestfs-man-pages-jaUpgrade virt-dibUpgrade qemu-kvm-ui-egl-headlessUpgrade qemu-kvm-block-iscsiUpgrade perl-Sys-VirtUpgrade netcf-libsUpgrade libvirt-daemon-driver-storage-glusterUpgrade libnbd-develUpgrade sgabios-binUpgrade nbdkit-gzip-pluginUpgrade libvirt-develUpgrade libvirt-daemon-driver-storage-coreUpgrade libguestfs-winsupportUpgrade libguestfs-develUpgrade qemu-pr-helperUpgrade nbdkit-gzip-filterUpgrade netcf | Oct 16, 2024 | Feb 19, 2024 |
| Redhat_linux | — | Upgrade qemu-kvm-ui-openglUpgrade qemu-kvm-device-usb-host-debuginfoUpgrade qemu-kvm-ui-opengl-debuginfoUpgrade qemu-kvm-ui-egl-headlessUpgrade qemu-kvm-device-display-virtio-gpu-pciUpgrade qemu-kvm-toolsUpgrade qemu-kvm-ui-egl-headless-debuginfoUpgrade qemu-kvm-core-debuginfoUpgrade qemu-kvm-device-usb-hostUpgrade qemu-kvm-device-display-virtio-vgaUpgrade qemu-imgUpgrade qemu-pr-helperUpgrade qemu-kvm-debuginfoUpgrade qemu-guest-agent-debuginfoUpgrade qemu-kvm-block-blkio-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-ccw-debuginfoUpgrade qemu-kvm-device-usb-redirect-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-debuginfoUpgrade qemu-kvm-block-rbdUpgrade qemu-kvm-audio-paUpgrade qemu-kvm-coreUpgrade qemu-kvm-device-usb-redirectUpgrade qemu-kvm-audio-dbus-debuginfoUpgrade qemu-img-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-ccwUpgrade qemu-kvm-block-rbd-debuginfoUpgrade qemu-kvm-device-display-virtio-vga-debuginfoUpgrade qemu-kvm-block-blkioUpgrade qemu-kvm-audio-pa-debuginfoUpgrade qemu-kvm-docsUpgrade qemu-kvmUpgrade qemu-kvm-debugsourceUpgrade qemu-kvm-device-display-virtio-gpuUpgrade qemu-kvm-common-debuginfoUpgrade qemu-guest-agentUpgrade qemu-kvm-ui-dbus-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-pci-debuginfoUpgrade qemu-kvm-block-curl-debuginfoUpgrade qemu-kvm-block-curlUpgrade qemu-kvm-tools-debuginfoUpgrade qemu-pr-helper-debuginfoUpgrade qemu-kvm-commonUpgrade qemu-kvm-tests-debuginfo | Nov 13, 2024 | Feb 19, 2024 |
| Rocky_linux | — | Upgrade qemu-guest-agent-debuginfoUpgrade qemu-kvm-debuginfoUpgrade qemu-kvm-block-curl-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-debuginfoUpgrade qemu-kvm-debugsourceUpgrade qemu-kvm-block-rbdUpgrade qemu-kvm-coreUpgrade qemu-kvm-device-display-virtio-vgaUpgrade qemu-kvm-device-usb-redirectUpgrade qemu-kvm-device-usb-redirect-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-pci-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-pciUpgrade qemu-pr-helperUpgrade qemu-kvm-common-debuginfoUpgrade qemu-kvm-block-blkio-debuginfoUpgrade qemu-pr-helper-debuginfoUpgrade qemu-kvm-device-display-virtio-gpuUpgrade qemu-kvm-device-usb-host-debuginfoUpgrade qemu-kvm-block-curlUpgrade qemu-guest-agentUpgrade qemu-kvm-audio-paUpgrade qemu-kvm-audio-pa-debuginfoUpgrade qemu-kvm-device-display-virtio-gpu-ccwUpgrade qemu-kvm-commonUpgrade qemu-imgUpgrade qemu-kvm-ui-openglUpgrade qemu-kvm-device-usb-hostUpgrade qemu-kvm-ui-opengl-debuginfoUpgrade qemu-kvm-docsUpgrade qemu-kvm-core-debuginfoUpgrade qemu-kvm-device-display-virtio-vga-debuginfoUpgrade qemu-kvm-block-rbd-debuginfoUpgrade qemu-kvm-block-blkioUpgrade qemu-kvmUpgrade qemu-kvm-toolsUpgrade qemu-kvm-device-display-virtio-gpu-ccw-debuginfoUpgrade qemu-img-debuginfoUpgrade qemu-kvm-ui-egl-headlessUpgrade qemu-kvm-ui-egl-headless-debuginfoUpgrade qemu-kvm-tools-debuginfo | Mar 18, 2025 | Feb 19, 2024 |
| Suse | — | Upgrade qemu-ui-cursesUpgrade qemu-vgabiosUpgrade qemu-hw-display-virtio-gpu-pciUpgrade qemu-s390xUpgrade qemu-hw-display-virtio-vgaUpgrade qemu-audio-dbusUpgrade qemu-hw-display-qxlUpgrade qemu-sgabiosUpgrade qemu-hw-usb-hostUpgrade qemu-kvmUpgrade qemu-block-nfsUpgrade qemu-hw-s390x-virtio-gpu-ccwUpgrade qemu-armUpgrade qemu-ivshmem-toolsUpgrade qemu-toolsUpgrade qemu-hw-display-virtio-gpuUpgrade qemu-SLOFUpgrade qemu-microvmUpgrade qemuUpgrade qemu-ui-dbusUpgrade qemu-x86Upgrade qemu-block-glusterUpgrade qemu-accel-qtestUpgrade qemu-block-curlUpgrade qemu-hw-usb-redirectUpgrade qemu-ui-spice-coreUpgrade qemu-ui-gtkUpgrade qemu-skibootUpgrade qemu-langUpgrade qemu-audio-jackUpgrade qemu-hw-usb-smartcardUpgrade qemu-ui-spice-appUpgrade qemu-ppcUpgrade qemu-block-iscsiUpgrade qemu-ui-openglUpgrade qemu-block-sshUpgrade qemu-ipxeUpgrade qemu-block-rbdUpgrade qemu-audio-spiceUpgrade qemu-audio-paUpgrade qemu-vhost-user-gpuUpgrade qemu-audio-alsaUpgrade qemu-accel-tcg-x86Upgrade qemu-chardev-spiceUpgrade qemu-guest-agentUpgrade qemu-seabiosUpgrade qemu-ksmUpgrade qemu-extraUpgrade qemu-chardev-baumUpgrade qemu-block-dmg | Apr 4, 2024 | Feb 19, 2024 |
| Ubuntu | — | Upgrade qemu-system-s390xUpgrade qemu-system-armUpgrade qemu-system-sparcUpgrade qemu-systemUpgrade qemu-system-mipsUpgrade qemu-system-x86Upgrade qemu-system-miscUpgrade qemu-system-ppc | Aug 23, 2024 | Feb 19, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub