CVE-2022-4172

An integer overflow and buffer overflow issues were found in the ACPI Error
Record Serialization Table (ERST) device of QEMU in the read_erst_record()
and write_erst_record() functions. Both issues may allow the guest to
overrun the host buffer allocated for the ERST memory device. A malicious
guest could use these flaws to crash the QEMU process on the host.

Bugs

• <http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1025123&gt;
• <https://gitlab.com/qemu-project/qemu/-/issues/1268&gt;

Notes