Ubuntu.comUB:CVE-2022-26354CVE-2022-26354
3.2 Low
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L
2.1 Low
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:N/I:N/A:P
0.0005 Low
EPSS
Percentile
14.8%
A flaw was found in the vhost-vsock device of QEMU. In case of error, an
invalid element was not detached from the virtqueue before freeing its
memory, leading to memory leakage and other unexpected results. Affected
QEMU versions <= 6.2.0.
Bugs
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 18.04 | noarch | qemu | < 1:2.11+dfsg-1ubuntu7.40 | UNKNOWN |
| ubuntu | 20.04 | noarch | qemu | < 1:4.2-3ubuntu6.23 | UNKNOWN |
| ubuntu | 21.10 | noarch | qemu | < 1:6.0+dfsg-2expubuntu1.3 | UNKNOWN |
| ubuntu | 22.04 | noarch | qemu | < 1:6.2+dfsg-2ubuntu6.2 | UNKNOWN |
| ubuntu | 22.10 | noarch | qemu | < 1:6.2+dfsg-2ubuntu8 | UNKNOWN |
| ubuntu | 23.04 | noarch | qemu | < 1:6.2+dfsg-2ubuntu8 | UNKNOWN |
| ubuntu | 23.10 | noarch | qemu | < 1:6.2+dfsg-2ubuntu8 | UNKNOWN |
| ubuntu | 14.04 | noarch | qemu | < any | UNKNOWN |
| ubuntu | 16.04 | noarch | qemu | < any | UNKNOWN |
Related
3.2 Low
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L
2.1 Low
CVSS2
Access Vector
LOCAL
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:N/I:N/A:P
0.0005 Low
EPSS
Percentile
14.8%