Description
Use-after-free vulnerability in the virtio-pci implementation in Qemu 1.4.0 through 1.6.0 allows local users to cause a denial of service (daemon crash) by "hot-unplugging" a virtio device.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | qemu | 1.7.0+dfsg-4 | — |
| Debian 13 | qemu | 1.7.0+dfsg-4 | — |
| Debian 12 | qemu | 1.7.0+dfsg-4 | — |
References
- [Qemu-devel] 20130920 [PATCH 11/11] virtio-pci: add device_unplugged callback mailing-list
- https://bugzilla.redhat.com/show_bug.cgi?id=1012633
- 55015 third-party-advisory
- USN-2092-1 vendor-advisory
- [oss-security] 20130926 Re: CVE request: qemu host crash from within guest mailing-list