Description
The QXL display driver in QXL Virtual GPU 0.1.0 allows local users to cause a denial of service (guest crash or hang) via a SPICE connection that prevents other threads from obtaining the qemu_mutex mutex. NOTE: some of these details are obtained from third party information.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 13 | xserver-xorg-video-qxl | 0.0.17-1 | — |
| Debian 12 | xserver-xorg-video-qxl | 0.0.17-1 | — |
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 6 | xorg-x11-drv-qxl | 0.0.14-14.el6_3 | RHSA-2013:0218 |
Advisories 1
- RHSA-2013:0218 Red Hat Security Advisory: xorg-x11-drv-qxl security update Red Hat Security Advisories (RHSA) · Nov 22, 2025
References
- https://bugzilla.redhat.com/show_bug.cgi?id=906032
- MDVSA-2013:138 vendor-advisory
- [oss-security] 20130130 CVE request -- qxl: synchronous io guest DoS mailing-list
- qxl-virtual-spice-dos(81704) vdb-entry
- 52021 third-party-advisory
- [oss-security] 20130130 Re: CVE request -- qxl: synchronous io guest DoS mailing-list
- USN-1714-1 vendor-advisory
- RHSA-2013:0218 vendor-advisory
- https://wiki.mageia.org/en/Support/Advisories/MGASA-2013-0036