CVE-2021-3735

2022-08-2615:25:40

CWE-667

redhat

www.cve.org

ahci controller

qemu

software reset

host-to-device register fis packet

denial of service

AI Score

4.6

Confidence

High

EPSS

Percentile

12.6%

JSON

A deadlock issue was found in the AHCI controller device of QEMU. It occurs on a software reset (ahci_reset_port) while handling a host-to-device Register FIS (Frame Information Structure) packet from the guest. A privileged user inside the guest could use this flaw to hang the QEMU process on the host, resulting in a denial of service condition. The highest threat from this vulnerability is to system availability.

CNA Affected

[
  {
    "product": "QEMU",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Not Known"
      }
    ]
  }
]