Description
In QEMU 1:4.1-1, 1:2.1+dfsg-12+deb8u6, 1:2.8+dfsg-6+deb9u8, 1:3.1+dfsg-8~deb10u1, 1:3.1+dfsg-8+deb10u2, and 1:2.1+dfsg-12+deb8u12 (fixed), when executing script in lsi_execute_script(), the LSI scsi adapter emulator advances 's->dsp' index to read next opcode. This can lead to an infinite loop if the next opcode is empty. Move the existing loop exit after 10k iterations so that it covers no-op opcodes as well.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | qemu | 1:4.1-2 | — |
| Debian 13 | qemu | 1:4.1-2 | — |
| Debian 12 | qemu | 1:4.1-2 | — |
| Debian 10 | qemu | 1:3.1+dfsg-8+deb10u5 | DSA-4665-1 |
| Debian 9 | qemu | 1:2.8+dfsg-6+deb9u10 | DLA-2288-1 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 8 | qemu | 1:2.1+dfsg-12+deb8u12 | DLA-1927-1 |
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 20.04 LTS | qemu | 1:4.2-1ubuntu1 | — |
| Ubuntu 18.04 LTS | qemu | 1:2.11+dfsg-1ubuntu7.20 | USN-4191-1 |
| Ubuntu 16.04 LTS | qemu | 1:2.5+dfsg-5ubuntu10.42 | USN-4191-1 |
Show 1 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu Pro 14.04 LTS | qemu | 2.0.0+dfsg-2ubuntu1.47 | USN-4191-2 |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 15 SP1 | qemu | 3.1.1.1-9.6.2 | SUSE-SU-2019:2955-1 |
| SLES 15 | qemu | 2.11.2-9.33.1 | SUSE-SU-2019:2954-1 |
| SLES 12 SP4 | qemu | 2.11.2-5.23.2 | SUSE-SU-2019:2956-1 |
| SLES 12 SP4 | xen | 4.11.2_02-2.14.2 | SUSE-SU-2019:2753-1 |
| SLES 12 SP3 | qemu | 2.9.1-6.44.1 | SUSE-SU-2020:1538-1 |
| SLES 12 SP3 | xen | 4.9.4_04-3.56.2 | SUSE-SU-2019:2769-1 |
| SLES 12 SP2 | qemu | 2.6.2-41.59.1 | SUSE-SU-2020:1526-1 |
| SLES 12 SP2 | xen | 4.7.6_06-43.54.2 | SUSE-SU-2019:2783-1 |
Show 13 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SLES 12 SP1 | qemu | 2.3.1-33.29.1 | SUSE-SU-2020:1514-1 |
| SLES 12 SP1 | xen | 4.5.5_28-22.64.1 | SUSE-SU-2020:0388-1 |
| SLES 11 SP4 | kvm | 1.4.2-60.31.1 | SUSE-SU-2020:14396-1 |
| SLES 11 SP4 | xen | 4.4.4_40-61.49.1 | SUSE-SU-2019:14199-1 |
| SLES for SAP 12 SP4 | qemu | 2.11.2-5.23.2 | SUSE-SU-2019:2956-1 |
| SLES for SAP 12 SP4 | xen | 4.11.2_02-2.14.2 | SUSE-SU-2019:2753-1 |
| SLES for SAP 12 SP3 | qemu | 2.9.1-6.44.1 | SUSE-SU-2020:1538-1 |
| SLES for SAP 12 SP3 | xen | 4.9.4_04-3.56.2 | SUSE-SU-2019:2769-1 |
| SLES for SAP 12 SP2 | qemu | 2.6.2-41.59.1 | SUSE-SU-2020:1526-1 |
| SLES for SAP 12 SP2 | xen | 4.7.6_06-43.54.2 | SUSE-SU-2019:2783-1 |
| SLES for SAP 12 SP1 | qemu | 2.3.1-33.29.1 | SUSE-SU-2020:1514-1 |
| SLES for SAP 12 SP1 | xen | 4.5.5_28-22.64.1 | SUSE-SU-2020:0388-1 |
| SUSE OpenStack Cloud Crowbar 8 | qemu | 2.9.1-6.44.1 | SUSE-SU-2020:1538-1 |
| SUSE OpenStack Cloud Crowbar 8 | xen | 4.9.4_04-3.56.2 | SUSE-SU-2019:2769-1 |
| SUSE OpenStack Cloud 8 | qemu | 2.9.1-6.44.1 | SUSE-SU-2020:1538-1 |
| SUSE OpenStack Cloud 8 | xen | 4.9.4_04-3.56.2 | SUSE-SU-2019:2769-1 |
| SUSE OpenStack Cloud 7 | qemu | 2.6.2-41.59.1 | SUSE-SU-2020:1526-1 |
| SUSE OpenStack Cloud 7 | xen | 4.7.6_06-43.54.2 | SUSE-SU-2019:2783-1 |
| SUSE Linux Enterprise Point of Sale 11 SP3 | kvm | 1.4.2-53.38.1 | SUSE-SU-2021:14706-1 |
| SUSE Linux Enterprise Point of Sale 11 SP3 | xen | 4.2.5_21-45.33.1 | SUSE-SU-2019:14201-1 |
| SUSE HPE Helion OpenStack 8 | qemu | 2.9.1-6.44.1 | SUSE-SU-2020:1538-1 |
| SUSE HPE Helion OpenStack 8 | xen | 4.9.4_04-3.56.2 | SUSE-SU-2019:2769-1 |
| SUSE Enterprise Storage 5 | qemu | 2.9.1-6.44.1 | SUSE-SU-2020:1538-1 |
| SUSE Enterprise Storage 5 | xen | 4.9.4_04-3.56.2 | SUSE-SU-2019:2769-1 |
| SUSE Enterprise Storage 4 | xen | 4.7.6_06-43.54.2 | SUSE-SU-2019:2783-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap 15.1 | qemu +1 | 3.1.1.1-lp151.7.6.1 | openSUSE-SU-2019:2510-1 |
| openSUSE Leap 15.0 | qemu | 2.11.2-lp150.7.28.1 | openSUSE-SU-2019:2505-1 |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 7 | qemu +9 | 15:3.1.0-7.el7 | ELSA-2020-5576 |
Advisories 23
- USN-4191-2 qemu vulnerabilities Ubuntu Security Notices (USN) · Apr 27, 2026
- USN-4191-1 qemu vulnerabilities Ubuntu Security Notices (USN) · Apr 27, 2026
- DSA-4665-1 qemu - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DLA-2288-1 qemu - security update Debian Security (DSA / DLA) · Mar 9, 2026
- DLA-1927-1 qemu - security update Debian Security (DSA / DLA) · Mar 9, 2026
- SUSE-SU-2019:14201-1 Security update for xen SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2020:1538-1 Security update for qemu SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2019:2954-1 Security update for qemu SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2019:14199-1 Security update for xen SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2019:2753-1 Security update for xen SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2019:2505-1 Security update for qemu SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2019:2783-1 Security update for xen SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2021:14706-1 Security update for kvm SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2019:2510-1 Security update for qemu SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2020:14396-1 Security update for kvm SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2019:2769-1 Security update for xen SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2019:2955-1 Security update for qemu SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2020:1514-1 Security update for qemu SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2020:1526-1 Security update for qemu SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2020:0388-1 Security update for xen SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2019:2956-1 Security update for qemu SUSE / openSUSE Security Updates · May 2, 2025
- WID-SEC-2024-1984 QEMU: Schwachstelle ermöglicht Denial of Service BSI CERT-Bund (WID) · Sep 2, 2024
- ELSA-2020-5576 Important: qemu security update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Mar 17, 2020
References
- [debian-lts-announce] 20190920 [SECURITY] [DLA 1927-1] qemu security update mailing-list
- https://lists.gnu.org/archive/html/qemu-devel/2019-08/msg01518.html
- https://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=de594e47659029316bbf9391efb79da0a1a08e08
- https://security-tracker.debian.org/tracker/CVE-2019-12068
- USN-4191-2 vendor-advisory
- openSUSE-SU-2019:2510 vendor-advisory
- openSUSE-SU-2019:2505 vendor-advisory
- USN-4191-1 vendor-advisory
- DSA-4665 vendor-advisory
- [debian-lts-announce] 20200726 [SECURITY] [DLA 2288-1] qemu security update mailing-list