QEMU 安全漏洞

QEMU is a suite of emulation processor software from Fabrice Bellard, a French personal developer. QEMU 6.2.0 and earlier versions contain an information disclosure vulnerability that stems from the fact that invalid elements in vhost-vsock devices are not separated from the virtqueue before...

CVE-2022-26354

A flaw was found in the vhost-vsock device of QEMU. In case of error, an invalid element was not detached from the virtqueue before freeing its memory, leading to memory leakage and other unexpected results. Mitigation Mitigation for this issue is either not available or the currently available...