Description
QEMU does not properly restrict write access to the PCI config space for certain PCI pass-through devices, which might allow local x86 HVM guests to gain privileges, cause a denial of service (host crash), obtain sensitive information, or possibly have other unspecified impact via unknown vectors.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | qemu | 1:2.3+dfsg-5 | — |
| Debian 14 | xen | 4.4.0-1 | — |
| Debian 13 | qemu | 1:2.3+dfsg-5 | — |
| Debian 13 | xen | 4.4.0-1 | — |
| Debian 12 | qemu | 1:2.3+dfsg-5 | — |
| Debian 12 | xen | 4.4.0-1 | — |
| Debian 8 | qemu | 1:2.1+dfsg-12+deb8u1 | DSA-3284-1 |
| Debian 8 | xen | 4.4.1-9+deb8u1 | DSA-3286-1 |
| Debian 7 | xen | 4.1.4-3+deb7u8 | DSA-3286-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 14.04 LTS | qemu | 2.0.0+dfsg-2ubuntu1.13 | USN-2630-1 |
| Ubuntu 14.04 LTS | xen | 4.4.2-0ubuntu0.14.04.2 | — |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 12 SP1 | xen | 4.5.2_02-4.1 | SUSE-SU-2015:2324-1 |
| SLES 12 | xen | 4.4.2_06-21.1 | SUSE-SU-2015:1042-1 |
Show 2 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES for SAP 12 SP1 | xen | 4.5.2_02-4.1 | SUSE-SU-2015:2324-1 |
| SLES for SAP 12 | xen | 4.4.2_06-21.1 | SUSE-SU-2015:1042-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | xen | 4.7.0_12-1.3 | openSUSE-SU-2024:10196-1 |
Advisories 6
- DSA-3284-1 qemu - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DSA-3286-1 xen - security update Debian Security (DSA / DLA) · Mar 9, 2026
- USN-2630-1 qemu, qemu-kvm vulnerabilities Ubuntu Security Notices (USN) · Feb 10, 2026
- SUSE-SU-2015:2324-1 Security update for xen SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2015:1042-1 Security update for xen SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:10196-1 xen-4.7.0_12-1.3 on GA media SUSE / openSUSE Security Updates · May 7, 2025
References
- USN-2630-1 vendor-advisory
- https://support.citrix.com/article/CTX206006
- DSA-3286 vendor-advisory
- SUSE-SU-2015:1156 vendor-advisory
- FEDORA-2015-9466 vendor-advisory
- DSA-3284 vendor-advisory
- 74949 vdb-entry
- http://xenbits.xen.org/xsa/advisory-131.html
- SUSE-SU-2015:1157 vendor-advisory
- http://support.citrix.com/article/CTX201145
- SUSE-SU-2015:1045 vendor-advisory
- GLSA-201604-03 vendor-advisory
- 1032467 vdb-entry
- FEDORA-2015-9456 vendor-advisory
- SUSE-SU-2015:1042 vendor-advisory
- FEDORA-2015-9965 vendor-advisory