CVE-2023-40360

2023-08-1400:00:00

ubuntu.com

qemu

null pointer

nvme_directive_receive

hardware

endurance group

flexible data placement

0.0004 Low

EPSS

Percentile

10.1%

JSON

QEMU through 8.0.4 accesses a NULL pointer in nvme_directive_receive in
hw/nvme/ctrl.c because there is no check for whether an endurance group is
configured before checking whether Flexible Data Placement is enabled.

Bugs

<https://gitlab.com/qemu-project/qemu/-/issues/1815>

Notes

Author	Note
mdeslaur	Introduced in 8.0.0

OSVersionArchitecturePackageVersionFilename
ubuntu23.10noarchqemu< 1:8.0.4+dfsg-1ubuntu3.23.10.2UNKNOWN
ubuntu24.04noarchqemu< 1:8.1.3+ds-1ubuntu1UNKNOWN