Description
A divide-by-zero issue was found in dwc2_handle_packet in hw/usb/hcd-dwc2.c in the hcd-dwc2 USB host controller emulation of QEMU. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Debian
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian 14 | qemu | 1:5.2+dfsg-1 | — |
| Debian 13 | qemu | 1:5.2+dfsg-1 | — |
| Debian 12 | qemu | 1:5.2+dfsg-1 | — |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | qemu | 5.2.0-r0 | — |
| Alpine v3.23 | qemu | 5.2.0-r0 | — |
| Alpine v3.22 | qemu | 5.2.0-r0 | — |
| Alpine v3.21 | qemu | 5.2.0-r0 | — |
| Alpine v3.20 | qemu | 5.2.0-r0 | — |
Show 4 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.19 | qemu | 5.2.0-r0 | — |
| Alpine v3.18 | qemu | 5.2.0-r0 | — |
| Alpine v3.17 | qemu | 5.2.0-r0 | — |
| Alpine v3.16 | qemu | 5.2.0-r0 | — |
Oracle Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Oracle Linux 8 | hivex +4 | 1.3.18-20.module+el8.4.0+20319+6eb4347c | ELSA-2021-9568 |
| Oracle Linux 8 | libguestfs-winsupport | 8.2-1.module+el8.4.0+20319+6eb4347c | ELSA-2021-9568 |
| Oracle Linux 8 | libiscsi +2 | 1.18.0-8.module+el8.4.0+20319+6eb4347c | ELSA-2021-9568 |
| Oracle Linux 8 | libnbd +3 | 1.2.2-1.module+el8.4.0+20319+6eb4347c | ELSA-2021-9568 |
| Oracle Linux 8 | libvirt +29 | 5.7.0-31.module+el8.4.0+20319+6eb4347c | ELSA-2021-9568 |
| Oracle Linux 8 | libvirt-dbus | 1.3.0-2.module+el8.4.0+20319+6eb4347c | ELSA-2021-9568 |
| Oracle Linux 8 | nbdkit +13 | 1.16.2-4.0.1.module+el8.4.0+20319+6eb4347c | ELSA-2021-9568 |
| Oracle Linux 8 | netcf +2 | 0.2.8-12.module+el8.4.0+20319+6eb4347c | ELSA-2021-9568 |
| Oracle Linux 8 | perl-Sys-Virt | 4.5.0-5.module+el8.4.0+20319+6eb4347c | ELSA-2021-9568 |
| Oracle Linux 8 | qemu-img +9 | 15:4.2.1-11.module+el8.4.0+20319+6eb4347c | ELSA-2021-9568 |
| Oracle Linux 8 | seabios +2 | 1.13.0-2.module+el8.4.0+20319+6eb4347c | ELSA-2021-9568 |
| Oracle Linux 8 | sgabios +1 | 1:0.20170427git-3.module+el8.4.0+20319+6eb4347c | ELSA-2021-9568 |
| Oracle Linux 8 | supermin +1 | 5.1.19-10.module+el8.4.0+20319+6eb4347c | ELSA-2021-9568 |
| Oracle Linux 8 | virt-dib +23 | 1:1.40.2-25.0.1.module+el8.4.0+20319+6eb4347c | ELSA-2021-9568 |
| Oracle Linux 7 | qemu +12 | 15:4.2.1-10.el7 | ELSA-2021-9335 |
Advisories 2
- ELSA-2021-9568 Important: virt:kvm_utils security update (Oracle Linux 8) Oracle Linux Security Advisories (ELSA) · Dec 1, 2021
- ELSA-2021-9335 Important: qemu security update (Oracle Linux 7) Oracle Linux Security Advisories (ELSA) · Jun 28, 2021
References
- https://lists.nongnu.org/archive/html/qemu-devel/2020-10/msg04263.html
- https://bugzilla.redhat.com/show_bug.cgi?id=1890653
- https://www.mail-archive.com/debian-bugs-dist%40lists.debian.org/msg1770368.html
- https://git.qemu.org/?p=qemu.git%3Ba=commit%3Bh=bea2a9e3e00b275dc40cfa09c760c715b8753e03
- https://security.netapp.com/advisory/ntap-20210720-0010/