Skip to content
OpenAdvisories
Unscored USN-4467-3 0 CVEs

qemu regression

Published Feb 22, 2021 · Updated Feb 10, 2026

Summary

USN-4467-1 fixed vulnerabilities in QEMU. The fix for CVE-2020-13754
introduced a regression in certain environments. This update fixes the
problem.

We apologize for the inconvenience.

Original advisory details:

Ren Ding, Hanqing Zhao, Alexander Bulekov, and Anatoly Trosinenko
discovered that the QEMU incorrectly handled certain msi-x mmio operations.
An attacker inside a guest could possibly use this issue to cause QEMU to
crash, resulting in a denial of service. (CVE-2020-13754)

Fixed packages 3

ReleasePackageFixed in
Ubuntu · 16.04 LTS 16.04:LTS qemu 1:2.5+dfsg-5ubuntu10.51
Ubuntu · 18.04 LTS 18.04:LTS qemu 1:2.11+dfsg-1ubuntu7.36
Ubuntu · 20.04 LTS 20.04:LTS qemu 1:4.2-3ubuntu6.14

References

  • report
    https://launchpad.net/bugs/1914883