CVE-2022-26353

A flaw was found in the virtio-net device of QEMU. This flaw was inadvertently introduced with the fix for CVE-2021-3748, which forgot to unmap the cached virtqueue elements on error, leading to memory leakage and other unexpected results. Affected QEMU version: 6.2.0...

CVE-2022-26353

A flaw was found in the virtio-net device of QEMU. This flaw was inadvertently introduced with the fix for CVE-2021-3748, which forgot to unmap the cached virtqueue elements on error, leading to memory leakage and other unexpected results. Affected QEMU version: 6.2.0...

QEMU 安全漏洞

QEMU Quick Emulator is a set of simulation processor software by Fabrice Bellard, a French individual developer. The software is fast and cross-platform. A security vulnerability exists in QEMU version 6.2.0, which stems from a previous fix for CVE-2021-3748 in the QEMU virtio-net appliance, that...

CVE-2022-26353: Missing Release of Resource after Effective Lifetime

A flaw was found in the virtio-net device of QEMU. This flaw was inadvertently introduced with the fix for CVE-2021-3748, which forgot to unmap the cached virtqueue elements on error, leading to memory leakage and other unexpected results. Affected QEMU version: 6.2.0...

CVE-2022-26353

A flaw was found in the virtio-net device of QEMU. This flaw was inadvertently introduced with the fix for CVE-2021-3748, which forgot to unmap the cached virtqueue elements on error, leading to memory leakage, use-after-free or other unexpected results. A malicious privileged guest could exploit...

PT-2022-4821

Name of the Vulnerable Software and Affected Versions QEMU version 6.2.0 Description A flaw in the virtio-net device of QEMU is related to an error in handling cached virtqueue elements, which can lead to memory leakage and other unexpected results. This issue allows a remote attacker to cause a...

USN-5307-1 qemu vulnerabilities

Gaoning Pan discovered that QEMU incorrectly handled the floppy disk emulator. An attacker inside the guest could use this issue to cause QEMU to crash, resulting in a denial of service. CVE-2021-20196 Gaoning Pan discovered that the QEMU vmxnet3 NIC emulator incorrectly handled certain values. A...

The vulnerability in the implementation of the virtio_net_receive_rcu function (hw/net/virtio-net.c) of the QEMU hardware emulation software allows a attacker to execute arbitrary code or cause a service failure.

The vulnerability of the virtionetreceivercu function implementation in the QEMU hardware emulation software hw/net/virtio-net.c is related to the use of memory after it is freed. Exploiting this vulnerability can allow a attacker to execute arbitrary code or cause system failures...

QEMU: virtio-net: heap use-after-free in virtio_net_receive_rcu

A use-after-free vulnerability was found in the virtio-net device of QEMU. It could occur when the descriptor's address belongs to the non direct access region, due to numbuffers being set after the virtqueue elem has been unmapped. A malicious guest could use this flaw to crash QEMU, resulting i...

SUSE SLES12: qemu / qemu-arm / qemu-block-curl / qemu-block-iscsi / etc (SUSE-SU-2021:3653-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:3653-1 advisory. Security issues fixed: - Fix out-of-bounds write in UAS USB Attached SCSI device emulation bsc1189702, CVE-2021-3713 - Fix heap...

openSUSE 15 Security Update : qemu (openSUSE-SU-2021:1461-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1461-1 advisory. - An out-of-bounds write flaw was found in the UAS USB Attached SCSI device emulation of QEMU in versions prior to 6.2.0-rc0. The device us...

openSUSE 15 Security Update : qemu (openSUSE-SU-2021:3604-1)

The remote SUSE Linux SUSE15 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:3604-1 advisory. - An out-of-bounds write flaw was found in the UAS USB Attached SCSI device emulation of QEMU in versions prior to 6.2.0-rc0. The device us...

openSUSE 15 Security Update : qemu (openSUSE-SU-2021:3605-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:3605-1 advisory. - An out-of-bounds write flaw was found in the UAS USB Attached SCSI device emulation of QEMU in versions prior to 6.2.0-rc0. The device us...

QEMU: virtio-net: heap use-after-free in virtio_net_receive_rcu

A use-after-free vulnerability was found in the virtio-net device of QEMU. It could occur when the descriptor's address belongs to the non direct access region, due to numbuffers being set after the virtqueue elem has been unmapped. A malicious guest could use this flaw to crash QEMU, resulting i...

UVI-2021-1001758 virtio-net: fix pages leaking when building skb in big mode

virtio-net: fix pages leaking when building skb in big mode This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.9 by commit...

GSD-2021-1001758 virtio-net: fix pages leaking when building skb in big mode

virtio-net: fix pages leaking when building skb in big mode This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.14.9 by commit...

PT-2021-30223

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.14.9 Description The issue is related to a potential security problem in the virtio-net component. It involves pages leaking when building skb in big mode. The actual impact and attack plausibility have not ye...

PT-2021-26228

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.14.9 Description: The issue is related to a potential security problem in the virtio-net component, specifically a pages leaking issue when building skb in big mode. The actual impact and attack plausibility...

OESA-2021-1371 qemu security update

QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed. Security Fixes: A use-after-free vulnerability was found in the virtio-net device of QEMU. It could occur when the descriptor's address belongs to the non direct access region, due to numbuffers being se...

PT-2024-11364

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the virtio-net component in the Linux kernel, where pages leak when building skb in big mode. This happens because the code tries to use build skb when there is...