Skip to content
OpenAdvisories
Unscored CVE-2020-25723 EUVD-2020-18377GHSA-4mvg-7php-mg7f

A reachable assertion issue was found in the USB EHCI emulation code of QEMU. It could occur while processing USB requests due to missing h…

Published Dec 2, 2020 · Updated Aug 4, 2024 · Assigned by redhat

Description

A reachable assertion issue was found in the USB EHCI emulation code of QEMU. It could occur while processing USB requests due to missing handling of DMA memory map failure. A malicious privileged user within the guest may abuse this flaw to send bogus USB requests and crash the QEMU process on the host, resulting in a denial of service.

Affected products

VendorProductAffectedFixed
— QEMU qemu 5.2.0 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 qemu 1:5.2+dfsg-1 —
Debian 13 qemu 1:5.2+dfsg-1 —
Debian 12 qemu 1:5.2+dfsg-1 —
Debian 10 qemu 1:3.1+dfsg-8+deb10u9 DLA-3099-1
Debian 9 qemu 1:2.8+dfsg-6+deb9u12 DLA-2469-1
ReleasePackageFixed inAdvisory
Ubuntu 20.04 LTS qemu 1:4.2-3ubuntu6.10 USN-4650-1
Ubuntu 18.04 LTS qemu 1:2.11+dfsg-1ubuntu7.34 USN-4650-1
Ubuntu 16.04 LTS qemu 1:2.5+dfsg-5ubuntu10.48 USN-4650-1
Show 1 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro 14.04 LTS qemu 2.0.0+dfsg-2ubuntu1.47+esm6 —
ReleasePackageFixed inAdvisory
RHEL 8 SLOF 20191022-3.git899d9883.module+el8.2.0+5449+efc036dd RHSA-2021:1762, RHSA-2021:0648, RHBA-2021:0639
RHEL 8 hivex +6 1.3.18-20.module+el8.2.0+5588+63a201c3 RHSA-2021:1762, RHSA-2021:0648, RHBA-2021:0639
RHEL 8 libguestfs-winsupport 8.2-1.module+el8.2.0+5590+82cd80df RHSA-2021:1762, RHSA-2021:0648, RHBA-2021:0639
RHEL 8 libiscsi +2 1.18.0-8.module+el8.1.0+4066+0f1aadab RHSA-2021:1762, RHSA-2021:0648, RHBA-2021:0639
RHEL 8 libnbd +5 1.2.2-1.module+el8.2.0+5644+32ac38d4 RHSA-2021:1762, RHSA-2021:0648, RHBA-2021:0639
RHEL 8 libnbd-bash-completion 1.4.0-2.module+el8.3.0+7998+6ff5e5ab RHBA-2021:0639
RHEL 8 libtpms +1 0.7.0-1.20191018gitdc116933b7.module+el8.2.0+4793+b09dd2fb RHSA-2021:0648, RHBA-2021:0639
RHEL 8 libvirt +28 6.0.0-25.5.module+el8.2.1+8680+ea98947b RHSA-2021:1762, RHSA-2021:0648, RHBA-2021:0639
RHEL 8 libvirt-dbus 1.3.0-2.module+el8.2.0+4793+b09dd2fb RHSA-2021:1762, RHSA-2021:0648, RHBA-2021:0639
RHEL 8 libvirt-python +1 6.0.0-1.module+el8.2.0+5453+31b2b136 RHSA-2021:1762, RHSA-2021:0648, RHBA-2021:0639
RHEL 8 nbdkit +13 1.16.2-4.module+el8.2.1+6710+effcb1df RHSA-2021:1762, RHSA-2021:0648, RHBA-2021:0639
RHEL 8 nbdkit-nbd-plugin +4 1.22.0-2.module+el8.3.0+8203+18ecf00e RHBA-2021:0639
RHEL 8 netcf +2 0.2.8-12.module+el8.1.0+4066+0f1aadab RHSA-2021:1762, RHSA-2021:0648, RHBA-2021:0639
RHEL 8 perl-Sys-Virt 6.0.0-1.module+el8.2.0+5488+267def79 RHSA-2021:1762, RHSA-2021:0648, RHBA-2021:0639
RHEL 8 python-pyvmomi +1 6.7.1-7.module+el8.2.0+4793+b09dd2fb RHSA-2021:0648, RHBA-2021:0639
RHEL 8 qemu-img +10 15:4.2.0-29.module+el8.2.1+9791+7d72b149.6 RHSA-2021:1762, RHSA-2021:0648, RHBA-2021:0639
RHEL 8 qemu-kiwi +1 15:5.1.0-20.module+el8.3.1+9918+230f5c26 RHBA-2021:0639
RHEL 8 seabios +2 1.13.0-2.module+el8.2.1+7284+aa32a2c4 RHSA-2021:1762, RHSA-2021:0648, RHBA-2021:0639
RHEL 8 sgabios +1 1:0.20170427git-3.module+el8.1.0+4066+0f1aadab RHSA-2021:1762, RHSA-2021:0648, RHBA-2021:0639
RHEL 8 supermin +1 5.1.19-10.module+el8.2.0+4793+b09dd2fb RHSA-2021:1762, RHSA-2021:0648, RHBA-2021:0639
RHEL 8 swtpm +3 0.2.0-2.20200127gitff5a83b.module+el8.2.0+5579+d71178e0 RHSA-2021:0648, RHBA-2021:0639
RHEL 8 virglrenderer +2 0.8.2-1.module+el8.2.0+5777+d9c2af8c RHSA-2021:0648
RHEL 8 virt-dib +25 1:1.40.2-24.module+el8.2.1+7154+47ffd890 RHSA-2021:1762, RHSA-2021:0648, RHBA-2021:0639
RHEL 8 virt-v2v-man-pages-ja +2 1:1.42.0-7.module+el8.3.1+9562+c3ede7c6 RHBA-2021:0639
Show 1 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
RHEL 8.2 EUS SLOF 20171214-6.gitfa98132.module+el8.1.0+4066+0f1aadab RHSA-2021:0771
RHEL 8.2 EUS hivex +6 1.3.15-7.module+el8.1.0+4066+0f1aadab RHSA-2021:0771
RHEL 8.2 EUS libguestfs-winsupport 8.0-4.module+el8.1.0+4066+0f1aadab RHSA-2021:0771
RHEL 8.2 EUS libiscsi +2 1.18.0-8.module+el8.1.0+4066+0f1aadab RHSA-2021:0771
RHEL 8.2 EUS libvirt +27 4.5.0-42.module+el8.2.0+6024+15a2423f RHSA-2021:0771
RHEL 8.2 EUS libvirt-dbus 1.2.0-3.module+el8.1.0+4066+0f1aadab RHSA-2021:0771
RHEL 8.2 EUS libvirt-python +1 4.5.0-2.module+el8.1.0+4066+0f1aadab RHSA-2021:0771
RHEL 8.2 EUS nbdkit +9 1.4.2-5.module+el8.1.0+4066+0f1aadab RHSA-2021:0771
RHEL 8.2 EUS netcf +2 0.2.8-12.module+el8.1.0+4066+0f1aadab RHSA-2021:0771
RHEL 8.2 EUS perl-Sys-Virt 4.5.0-5.module+el8.1.0+4066+0f1aadab RHSA-2021:0771
RHEL 8.2 EUS qemu-img +10 15:2.12.0-99.module+el8.2.0+9793+0e887671.5 RHSA-2021:0771
RHEL 8.2 EUS seabios +2 1.11.1-4.module+el8.1.0+4066+0f1aadab RHSA-2021:0771
RHEL 8.2 EUS sgabios +1 1:0.20170427git-3.module+el8.1.0+4066+0f1aadab RHSA-2021:0771
RHEL 8.2 EUS supermin +1 5.1.19-9.module+el8.1.0+4066+0f1aadab RHSA-2021:0771
RHEL 8.2 EUS virt-dib +25 1:1.38.4-15.module+el8.2.0+5297+222a20af RHSA-2021:0771

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 8 hivex +6 1.3.18-20.module_el8.3.0+2048+e7a0a3ea ALSA-2021:1762
AlmaLinux 8 libguestfs-winsupport 8.2-1.module_el8.3.0+2048+e7a0a3ea ALSA-2021:1762
AlmaLinux 8 libiscsi +2 1.18.0-8.module_el8.3.0+2048+e7a0a3ea ALSA-2021:1762
AlmaLinux 8 libnbd +5 1.2.2-1.module_el8.3.0+2048+e7a0a3ea ALSA-2021:1762
AlmaLinux 8 libvirt-dbus 1.3.0-2.module_el8.3.0+2048+e7a0a3ea ALSA-2021:1762
AlmaLinux 8 nbdkit +13 1.16.2-4.module_el8.5.0+2608+72063365 ALSA-2021:1762
AlmaLinux 8 netcf +2 0.2.8-12.module_el8.3.0+2048+e7a0a3ea ALSA-2021:1762
AlmaLinux 8 ocaml-libguestfs +1 1:1.40.2-27.module_el8.4.0+2358+630e803b.alma ALSA-2021:1762
AlmaLinux 8 perl-Sys-Virt +1 6.0.0-1.module_el8.3.0+2048+e7a0a3ea ALSA-2021:1762
AlmaLinux 8 seabios +2 1.13.0-2.module_el8.5.0+2608+72063365 ALSA-2021:1762
AlmaLinux 8 sgabios 1:0.20170427git-3.module_el8.3.0+2048+e7a0a3ea ALSA-2021:1762
AlmaLinux 8 sgabios-bin 1:0.20170427git-3.module_el8.5.0+2608+72063365 ALSA-2021:1762
AlmaLinux 8 supermin +1 5.1.19-10.module_el8.5.0+2608+72063365 ALSA-2021:1762

Rocky Linux

Errata ↗
ReleasePackageFixed inAdvisory
Rocky Linux 8 hivex 1.3.18-20.module+el8.4.0+534+4680a14e RLSA-2021:1762
Rocky Linux 8 libguestfs 1:1.40.2-27.module+el8.4.0+534+4680a14e RLSA-2021:1762
Rocky Linux 8 libguestfs-winsupport 8.2-1.module+el8.4.0+534+4680a14e RLSA-2021:1762
Rocky Linux 8 libiscsi 1.18.0-8.module+el8.4.0+534+4680a14e RLSA-2021:1762
Rocky Linux 8 libnbd 1.2.2-1.module+el8.4.0+534+4680a14e RLSA-2021:1762
Rocky Linux 8 libvirt 6.0.0-35.module+el8.4.0+534+4680a14e RLSA-2021:1762
Rocky Linux 8 libvirt-dbus 1.3.0-2.module+el8.4.0+534+4680a14e RLSA-2021:1762
Rocky Linux 8 nbdkit 1.16.2-4.module+el8.4.0+534+4680a14e RLSA-2021:1762
Rocky Linux 8 netcf 0.2.8-12.module+el8.4.0+534+4680a14e RLSA-2021:1762
Rocky Linux 8 perl-Sys-Virt +1 6.0.0-1.module+el8.4.0+534+4680a14e RLSA-2021:1762
Rocky Linux 8 qemu-kvm 5:4.2.0-48.module+el8.4.0+534+4680a14e RLSA-2021:1762
Rocky Linux 8 seabios 1.13.0-2.module+el8.4.0+534+4680a14e RLSA-2021:1762
Rocky Linux 8 sgabios 1:0.20170427git-3.module+el8.4.0+534+4680a14e RLSA-2021:1762
Rocky Linux 8 supermin 5.1.19-10.module+el8.4.0+534+4680a14e RLSA-2021:1762
ReleasePackageFixed inAdvisory
SLES 15 SP3 qemu 5.2.0-17.1 SUSE-SU-2021:1942-1
SLES 15 SP2 qemu 3.1.1.1-9.27.2 SUSE-SU-2021:1918-1, SUSE-SU-2021:1893-1, SUSE-SU-2021:1243-1
SLES 15 SP1 qemu 3.1.1.1-9.24.3 SUSE-SU-2021:1918-1, SUSE-SU-2021:1245-1
SLES 15 qemu 2.11.2-9.43.1 SUSE-SU-2021:1895-1, SUSE-SU-2021:1244-1
SLES 12 SP5 qemu 3.1.1.1-48.2 SUSE-SU-2021:1837-1, SUSE-SU-2021:1242-1
Show 22 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES 12 SP4 qemu 2.11.2-5.29.1 SUSE-SU-2021:1947-1, SUSE-SU-2021:1241-1
SLES 12 SP3 qemu 2.9.1-6.47.1 SUSE-SU-2021:1894-1, SUSE-SU-2021:1240-1
SLES 12 SP2 qemu 2.6.2-41.62.1 SUSE-SU-2021:1829-1, SUSE-SU-2021:1305-1
SLES 11 SP4 kvm 1.4.2-60.34.1 SUSE-SU-2021:14704-1
SLES 11 SP4 xen 4.4.4_46-61.58.1 SUSE-SU-2020:14557-1
SLES for SAP 15 SP1 qemu 3.1.1.1-9.24.3 SUSE-SU-2021:1918-1, SUSE-SU-2021:1245-1
SLES for SAP 15 qemu 2.11.2-9.43.1 SUSE-SU-2021:1895-1, SUSE-SU-2021:1244-1
SLES for SAP 12 SP5 qemu 3.1.1.1-48.2 SUSE-SU-2021:1837-1, SUSE-SU-2021:1242-1
SLES for SAP 12 SP4 qemu 2.11.2-5.29.1 SUSE-SU-2021:1947-1, SUSE-SU-2021:1241-1
SLES for SAP 12 SP3 qemu 2.9.1-6.47.1 SUSE-SU-2021:1894-1, SUSE-SU-2021:1240-1
SLE Micro 5.0 qemu 4.2.1-11.16.3 SUSE-SU-2021:1893-1, SUSE-SU-2021:1243-1
SLE HPC 15 SP1 qemu 3.1.1.1-9.24.3 SUSE-SU-2021:1918-1, SUSE-SU-2021:1245-1
SLE HPC 15 qemu 2.11.2-9.43.1 SUSE-SU-2021:1895-1, SUSE-SU-2021:1244-1
SUSE OpenStack Cloud Crowbar 9 qemu 2.11.2-5.29.1 SUSE-SU-2021:1947-1, SUSE-SU-2021:1241-1
SUSE OpenStack Cloud Crowbar 8 qemu 2.9.1-6.47.1 SUSE-SU-2021:1894-1, SUSE-SU-2021:1240-1
SUSE OpenStack Cloud 9 qemu 2.11.2-5.29.1 SUSE-SU-2021:1947-1, SUSE-SU-2021:1241-1
SUSE OpenStack Cloud 8 qemu 2.9.1-6.47.1 SUSE-SU-2021:1894-1, SUSE-SU-2021:1240-1
SUSE Manager Server 4.0 qemu 3.1.1.1-9.24.3 SUSE-SU-2021:1918-1, SUSE-SU-2021:1245-1
SUSE Manager Retail Branch Server 4.0 qemu 3.1.1.1-9.24.3 SUSE-SU-2021:1918-1, SUSE-SU-2021:1245-1
SUSE Manager Proxy 4.0 qemu 3.1.1.1-9.24.3 SUSE-SU-2021:1918-1, SUSE-SU-2021:1245-1
SUSE Linux Enterprise Point of Sale 11 SP3 kvm 1.4.2-53.38.1 SUSE-SU-2021:14706-1
SUSE HPE Helion OpenStack 8 qemu 2.9.1-6.47.1 SUSE-SU-2021:1894-1, SUSE-SU-2021:1240-1
SUSE Enterprise Storage 6 qemu 3.1.1.1-9.24.3 SUSE-SU-2021:1918-1, SUSE-SU-2021:1245-1
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed qemu 6.1.0-32.1 openSUSE-SU-2024:11287-1
openSUSE Leap 15.3 qemu 5.2.0-17.1 openSUSE-SU-2021:1942-1
openSUSE Leap 15.2 qemu +2 4.2.1-lp152.9.12.1 openSUSE-SU-2021:1043-1, openSUSE-SU-2021:0600-1
ReleasePackageFixed inAdvisory
Alpine v3.24 qemu 5.2.0-r0 —
Alpine v3.23 qemu 5.2.0-r0 —
Alpine v3.22 qemu 5.2.0-r0 —
Alpine v3.21 qemu 5.2.0-r0 —
Alpine v3.20 qemu 5.2.0-r0 —
Show 4 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Alpine v3.19 qemu 5.2.0-r0 —
Alpine v3.18 qemu 5.2.0-r0 —
Alpine v3.17 qemu 5.2.0-r0 —
Alpine v3.16 qemu 5.2.0-r0 —

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2 qemu +26 10:3.1.0-8.amzn2.0.8 ALAS2-2021-1671

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 8 hivex +6 1.3.18-20.module+el8.3.0+7860+a7792d29 ELSA-2021-1762
Oracle Linux 8 libguestfs-winsupport 8.2-1.module+el8.3.0+7860+a7792d29 ELSA-2021-1762
Oracle Linux 8 libiscsi +2 1.18.0-8.module+el8.3.0+7860+a7792d29 ELSA-2021-1762
Oracle Linux 8 libnbd +5 1.2.2-1.module+el8.3.0+7860+a7792d29 ELSA-2021-1762
Oracle Linux 8 libvirt +28 6.0.0-35.0.1.module+el8.4.0+20171+f6690737 ELSA-2021-1762
Oracle Linux 8 libvirt-dbus 1.3.0-2.module+el8.3.0+7860+a7792d29 ELSA-2021-1762
Oracle Linux 8 nbdkit +13 1.16.2-4.0.1.module+el8.3.0+7860+a7792d29 ELSA-2021-1762
Oracle Linux 8 netcf +2 0.2.8-12.module+el8.3.0+7860+a7792d29 ELSA-2021-1762
Oracle Linux 8 perl-Sys-Virt +1 6.0.0-1.module+el8.3.0+7860+a7792d29 ELSA-2021-1762
Oracle Linux 8 qemu-img +10 15:4.2.0-48.module+el8.4.0+20158+f6690737 ELSA-2021-1762
Oracle Linux 8 seabios +2 1.13.0-2.module+el8.3.0+7860+a7792d29 ELSA-2021-1762
Oracle Linux 8 sgabios +1 1:0.20170427git-3.module+el8.3.0+7860+a7792d29 ELSA-2021-1762
Oracle Linux 8 supermin +1 5.1.19-10.module+el8.3.0+7860+a7792d29 ELSA-2021-1762
Oracle Linux 8 virt-dib +25 1:1.40.2-27.0.1.module+el8.4.0+20093+03a97712 ELSA-2021-1762
Oracle Linux 7 qemu +12 15:4.2.1-4.el7 ELSA-2021-9034

Advisories 35

References