CVE-2021-3748

CVE-2021-3748 affects the QEMU virtio-net device. A use-after-free can occur when the descriptor’s address lies in the non-direct-access region and num_buffers is set after the virtqueue element is unmapped, enabling a guest to crash QEMU or potentially execute code on the host with QEMU privileg...

CVE-2021-3930

CVE-2021-3930 concerns an off-by-one error in the SCSI device emulation of QEMU during MODE SELECT handling in mode_sense_page() when page is MODE_PAGE_ALLS (0x3f). The vulnerability can allow a malicious guest to crash QEMU, causing a denial of service. Affected software is QEMU (various release...