Skip to content
OpenAdvisories
Unscored CVE-2021-20257 EUVD-2021-7695GHSA-j586-x8f6-9xf2

An infinite loop flaw was found in the e1000 NIC emulator of the QEMU. This issue occurs while processing transmits (tx) descriptors in pro…

Published Mar 16, 2022 · Updated Aug 3, 2024 · Assigned by redhat

Description

An infinite loop flaw was found in the e1000 NIC emulator of the QEMU. This issue occurs while processing transmits (tx) descriptors in process_tx_desc if various descriptor fields are initialized with invalid values. This flaw allows a guest to consume CPU cycles on the host, resulting in a denial of service. The highest threat from this vulnerability is to system availability.

Affected products

VendorProductAffectedFixed
— QEMU Fixed-In v6.2.0 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 qemu 1:5.2+dfsg-9 —
Debian 13 qemu 1:5.2+dfsg-9 —
Debian 12 qemu 1:5.2+dfsg-9 —
Debian 10 qemu 1:3.1+dfsg-8+deb10u9 DLA-3099-1
Debian 9 qemu 1:2.8+dfsg-6+deb9u14 DLA-2623-1
ReleasePackageFixed inAdvisory
Ubuntu 20.04 LTS qemu 1:4.2-3ubuntu6.17 USN-5010-1
Ubuntu 18.04 LTS qemu 1:2.11+dfsg-1ubuntu7.37 USN-5010-1
Show 2 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
Ubuntu Pro 16.04 LTS qemu 1:2.5+dfsg-5ubuntu10.51+esm4 —
Ubuntu Pro 14.04 LTS qemu 2.0.0+dfsg-2ubuntu1.47+esm6 —
ReleasePackageFixed inAdvisory
RHEL 8 SLOF 20191022-3.git899d9883.module+el8.3.0+6423+e4cb6418 RHSA-2022:0081, RHSA-2021:5238
RHEL 8 hivex +6 1.3.18-21.module+el8.5.0+10709+b3edb581 RHSA-2022:0081, RHSA-2021:5238
RHEL 8 libguestfs-winsupport 8.2-1.module+el8.3.0+6423+e4cb6418 RHSA-2022:0081, RHSA-2021:5238
RHEL 8 libiscsi +2 1.18.0-8.module+el8.1.0+4066+0f1aadab RHSA-2022:0081, RHSA-2021:5238
RHEL 8 libnbd +5 1.2.2-1.module+el8.3.0+7353+9de0a3cc RHSA-2022:0081, RHSA-2021:5238
RHEL 8 libnbd-bash-completion 1.6.0-4.module+el8.5.0+11638+3d8f9850 RHSA-2022:0081
RHEL 8 libtpms +1 0.7.4-6.20201106git2452a24dab.module+el8.5.0+12487+f2fa92b4 RHSA-2022:0081
RHEL 8 libvirt +28 6.0.0-37.module+el8.5.0+12162+40884dd2 RHSA-2022:0081, RHSA-2021:5238
RHEL 8 libvirt-dbus 1.3.0-2.module+el8.3.0+6423+e4cb6418 RHSA-2022:0081, RHSA-2021:5238
RHEL 8 libvirt-wireshark 7.6.0-6.module+el8.5.0+13051+7ddbe958 RHSA-2022:0081
RHEL 8 nbdkit +13 1.16.2-4.module+el8.3.0+6922+fd575af8 RHSA-2022:0081, RHSA-2021:5238
RHEL 8 nbdkit-nbd-plugin +4 1.24.0-1.module+el8.4.0+9341+96cf2672 RHSA-2022:0081
RHEL 8 netcf +2 0.2.8-12.module+el8.1.0+4066+0f1aadab RHSA-2022:0081, RHSA-2021:5238
RHEL 8 perl-Sys-Virt +2 6.0.0-1.module+el8.3.0+6423+e4cb6418 RHSA-2022:0081, RHSA-2021:5238
RHEL 8 python-pyvmomi +1 6.7.1-7.module+el8.4.0+8855+a9e237a9 RHSA-2022:0081
RHEL 8 qemu-img +10 15:4.2.0-59.module+el8.5.0+13495+8166cdf8.1 RHSA-2022:0081, RHSA-2021:5238
RHEL 8 qemu-kiwi +4 15:6.0.0-33.module+el8.5.0+13514+2c386966.1 RHSA-2022:0081
RHEL 8 seabios +2 1.13.0-2.module+el8.3.0+7353+9de0a3cc RHSA-2022:0081, RHSA-2021:5238
RHEL 8 sgabios +1 1:0.20170427git-3.module+el8.1.0+4066+0f1aadab RHSA-2022:0081, RHSA-2021:5238
RHEL 8 supermin +1 5.1.19-10.module+el8.3.0+6423+e4cb6418 RHSA-2022:0081, RHSA-2021:5238
RHEL 8 swtpm +4 0.6.0-2.20210607gitea627b3.module+el8.5.0+12696+4ce1c6bc RHSA-2022:0081
RHEL 8 virt-dib +25 1:1.40.2-28.module+el8.5.0+10717+67be7ac4 RHSA-2022:0081, RHSA-2021:5238
RHEL 8 virt-v2v-man-pages-ja +2 1:1.42.0-15.module+el8.5.0+12264+1ee0d523 RHSA-2022:0081

AlmaLinux

Errata ↗
ReleasePackageFixed inAdvisory
AlmaLinux 8 hivex +4 1.3.18-21.module_el8.5.0+2608+72063365 ALSA-2021:5238
AlmaLinux 8 libguestfs-winsupport 8.2-1.module_el8.5.0+2608+72063365 ALSA-2021:5238
AlmaLinux 8 libiscsi +2 1.18.0-8.module_el8.5.0+2608+72063365 ALSA-2021:5238
AlmaLinux 8 libnbd +3 1.2.2-1.module_el8.5.0+2608+72063365 ALSA-2021:5238
AlmaLinux 8 libvirt +28 6.0.0-37.module_el8.5.0+2608+72063365 ALSA-2021:5238
AlmaLinux 8 libvirt-dbus 1.3.0-2.module_el8.5.0+2608+72063365 ALSA-2021:5238
AlmaLinux 8 nbdkit +13 1.16.2-4.module_el8.5.0+2608+72063365 ALSA-2021:5238
AlmaLinux 8 netcf +2 0.2.8-12.module_el8.5.0+2608+72063365 ALSA-2021:5238
AlmaLinux 8 perl-Sys-Virt +1 6.0.0-1.module_el8.5.0+2608+72063365 ALSA-2021:5238
AlmaLinux 8 qemu-img +9 15:4.2.0-59.module_el8.5.0+2608+72063365.1 ALSA-2021:5238
AlmaLinux 8 seabios +2 1.13.0-2.module_el8.5.0+2608+72063365 ALSA-2021:5238
AlmaLinux 8 sgabios +1 1:0.20170427git-3.module_el8.5.0+2608+72063365 ALSA-2021:5238
AlmaLinux 8 supermin +1 5.1.19-10.module_el8.5.0+2608+72063365 ALSA-2021:5238
AlmaLinux 8 virt-dib +23 1:1.40.2-28.module_el8.5.0+2608+72063365.alma ALSA-2021:5238

Rocky Linux

Errata ↗
ReleasePackageFixed inAdvisory
Rocky Linux 8 hivex 1.3.18-21.module+el8.4.0+642+7e26f5e1 RLSA-2021:5238
Rocky Linux 8 libguestfs 1:1.40.2-28.module+el8.5.0+670+c4aa478c RLSA-2021:5238
Rocky Linux 8 libguestfs-winsupport 8.2-1.module+el8.4.0+534+4680a14e RLSA-2021:5238
Rocky Linux 8 libiscsi 1.18.0-8.module+el8.4.0+534+4680a14e RLSA-2021:5238
Rocky Linux 8 libnbd 1.2.2-1.module+el8.4.0+534+4680a14e RLSA-2021:5238
Rocky Linux 8 libvirt 6.0.0-37.module+el8.5.0+670+c4aa478c RLSA-2021:5238
Rocky Linux 8 libvirt-dbus 1.3.0-2.module+el8.4.0+534+4680a14e RLSA-2021:5238
Rocky Linux 8 nbdkit 1.16.2-4.module+el8.4.0+534+4680a14e RLSA-2021:5238
Rocky Linux 8 netcf 0.2.8-12.module+el8.4.0+534+4680a14e RLSA-2021:5238
Rocky Linux 8 perl-Sys-Virt +1 6.0.0-1.module+el8.4.0+534+4680a14e RLSA-2021:5238
Rocky Linux 8 qemu-kvm 5:4.2.0-59.module+el8.5.0+670+c4aa478c RLSA-2021:5238
Rocky Linux 8 seabios 1.13.0-2.module+el8.4.0+534+4680a14e RLSA-2021:5238
Rocky Linux 8 sgabios 1:0.20170427git-3.module+el8.4.0+534+4680a14e RLSA-2021:5238
Rocky Linux 8 supermin 5.1.19-10.module+el8.4.0+534+4680a14e RLSA-2021:5238
ReleasePackageFixed inAdvisory
SLES 15 SP2 qemu 3.1.1.1-9.27.2 SUSE-SU-2021:1918-1, SUSE-SU-2021:1893-1, SUSE-SU-2021:1243-1
SLES 15 SP1 qemu 3.1.1.1-9.24.3 SUSE-SU-2021:1918-1, SUSE-SU-2021:1245-1
SLES 15 qemu 2.11.2-9.43.1 SUSE-SU-2021:1895-1, SUSE-SU-2021:1244-1
SLES 12 SP5 qemu 3.1.1.1-48.2 SUSE-SU-2021:1837-1, SUSE-SU-2021:1242-1
SLES 12 SP5 xen 4.12.4_09-3.39.3 SUSE-SU-2021:1023-1
SLES 12 SP4 qemu 2.11.2-5.29.1 SUSE-SU-2021:1947-1, SUSE-SU-2021:1241-1
SLES 12 SP4 xen 4.11.4_16-2.51.1 SUSE-SU-2021:1251-1
Show 21 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SLES 12 SP3 qemu 2.9.1-6.47.1 SUSE-SU-2021:1894-1, SUSE-SU-2021:1240-1
SLES 12 SP3 xen 4.9.4_16-3.83.1 SUSE-SU-2021:1252-1
SLES 12 SP2 qemu 2.6.2-41.62.1 SUSE-SU-2021:1829-1, SUSE-SU-2021:1305-1
SLES 12 SP2 xen 4.7.6_22-43.88.1 SUSE-SU-2022:1375-1
SLES 11 SP4 kvm 1.4.2-60.34.1 SUSE-SU-2021:14704-1
SLES 11 SP4 xen 4.4.4_48-61.64.1 SUSE-SU-2021:14702-1
SLES for SAP 15 SP1 qemu 3.1.1.1-9.24.3 SUSE-SU-2021:1918-1, SUSE-SU-2021:1245-1
SLES for SAP 15 qemu 2.11.2-9.43.1 SUSE-SU-2021:1895-1, SUSE-SU-2021:1244-1
SLES for SAP 12 SP5 qemu 3.1.1.1-48.2 SUSE-SU-2021:1837-1, SUSE-SU-2021:1242-1
SLES for SAP 12 SP5 xen 4.12.4_09-3.39.3 SUSE-SU-2021:1023-1
SLES for SAP 12 SP4 qemu 2.11.2-5.29.1 SUSE-SU-2021:1947-1, SUSE-SU-2021:1241-1
SLES for SAP 12 SP4 xen 4.11.4_16-2.51.1 SUSE-SU-2021:1251-1
SLES for SAP 12 SP3 qemu 2.9.1-6.47.1 SUSE-SU-2021:1894-1, SUSE-SU-2021:1240-1
SLES for SAP 12 SP3 xen 4.9.4_16-3.83.1 SUSE-SU-2021:1252-1
SLE Micro 5.0 qemu 4.2.1-11.16.3 SUSE-SU-2021:1893-1, SUSE-SU-2021:1243-1
SLE HPC 15 SP1 qemu 3.1.1.1-9.24.3 SUSE-SU-2021:1918-1, SUSE-SU-2021:1245-1
SLE HPC 15 qemu 2.11.2-9.43.1 SUSE-SU-2021:1895-1, SUSE-SU-2021:1244-1
SUSE OpenStack Cloud Crowbar 9 qemu 2.11.2-5.29.1 SUSE-SU-2021:1947-1, SUSE-SU-2021:1241-1
SUSE OpenStack Cloud Crowbar 9 xen 4.11.4_16-2.51.1 SUSE-SU-2021:1251-1
SUSE OpenStack Cloud Crowbar 8 qemu 2.9.1-6.47.1 SUSE-SU-2021:1894-1, SUSE-SU-2021:1240-1
SUSE OpenStack Cloud Crowbar 8 xen 4.9.4_16-3.83.1 SUSE-SU-2021:1252-1
SUSE OpenStack Cloud 9 qemu 2.11.2-5.29.1 SUSE-SU-2021:1947-1, SUSE-SU-2021:1241-1
SUSE OpenStack Cloud 9 xen 4.11.4_16-2.51.1 SUSE-SU-2021:1251-1
SUSE OpenStack Cloud 8 qemu 2.9.1-6.47.1 SUSE-SU-2021:1894-1, SUSE-SU-2021:1240-1
SUSE OpenStack Cloud 8 xen 4.9.4_16-3.83.1 SUSE-SU-2021:1252-1
SUSE Manager Server 4.0 qemu 3.1.1.1-9.24.3 SUSE-SU-2021:1918-1, SUSE-SU-2021:1245-1
SUSE Manager Retail Branch Server 4.0 qemu 3.1.1.1-9.24.3 SUSE-SU-2021:1918-1, SUSE-SU-2021:1245-1
SUSE Manager Proxy 4.0 qemu 3.1.1.1-9.24.3 SUSE-SU-2021:1918-1, SUSE-SU-2021:1245-1
SUSE Linux Enterprise Point of Sale 11 SP3 kvm 1.4.2-53.38.1 SUSE-SU-2021:14706-1
SUSE HPE Helion OpenStack 8 qemu 2.9.1-6.47.1 SUSE-SU-2021:1894-1, SUSE-SU-2021:1240-1
SUSE HPE Helion OpenStack 8 xen 4.9.4_16-3.83.1 SUSE-SU-2021:1252-1
SUSE Enterprise Storage 6 qemu 3.1.1.1-9.24.3 SUSE-SU-2021:1918-1, SUSE-SU-2021:1245-1
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed qemu 6.1.0-32.1 openSUSE-SU-2024:11287-1
openSUSE Leap 15.2 qemu +2 4.2.1-lp152.9.12.1 openSUSE-SU-2021:1043-1, openSUSE-SU-2021:0600-1
ReleasePackageFixed inAdvisory
Alpine v3.15 qemu 6.1.1-r0 —

Amazon Linux

ReleasePackageFixed inAdvisory
Amazon Linux 2 qemu +26 10:3.1.0-8.amzn2.0.9 ALAS2-2023-2060

Azure Linux

ReleasePackageFixed inAdvisory
Azure Linux 2 (CBL-Mariner) qemu 6.2.0-2 —

Oracle Linux

ReleasePackageFixed inAdvisory
Oracle Linux 8 hivex +4 1.3.18-20.module+el8.4.0+20319+6eb4347c ELSA-2022-9172, ELSA-2021-9568, ELSA-2021-5238
Oracle Linux 8 libguestfs-winsupport 8.2-1.module+el8.3.0+7860+a7792d29 ELSA-2022-9172, ELSA-2021-9568, ELSA-2021-5238
Oracle Linux 8 libiscsi +2 1.18.0-8.module+el8.3.0+7860+a7792d29 ELSA-2022-9172, ELSA-2021-9568, ELSA-2021-5238
Oracle Linux 8 libnbd +5 1.2.2-1.module+el8.3.0+7860+a7792d29 ELSA-2022-9172, ELSA-2021-9568, ELSA-2021-5238
Oracle Linux 8 libvirt +29 5.7.0-31.module+el8.4.0+20319+6eb4347c ELSA-2022-9172, ELSA-2021-9568, ELSA-2021-5238
Oracle Linux 8 libvirt-dbus 1.3.0-2.module+el8.3.0+7860+a7792d29 ELSA-2022-9172, ELSA-2021-9568, ELSA-2021-5238
Oracle Linux 8 nbdkit +13 1.16.2-4.0.1.module+el8.3.0+7860+a7792d29 ELSA-2022-9172, ELSA-2021-9568, ELSA-2021-5238
Oracle Linux 8 netcf +2 0.2.8-12.module+el8.3.0+7860+a7792d29 ELSA-2022-9172, ELSA-2021-9568, ELSA-2021-5238
Oracle Linux 8 ocaml-hivex +1 1.3.18-21.module+el8.5.0+20365+3abb8f5b ELSA-2021-5238
Oracle Linux 8 ocaml-libguestfs +1 1:1.40.2-28.0.1.module+el8.5.0+20363+3abb8f5b ELSA-2021-5238
Oracle Linux 8 perl-Sys-Virt 4.5.0-5.module+el8.4.0+20319+6eb4347c ELSA-2022-9172, ELSA-2021-9568, ELSA-2021-5238
Oracle Linux 8 qemu-img +10 15:4.2.0-59.module+el8.5.0+20460+2eddfbf5.1 ELSA-2022-9172, ELSA-2021-9568, ELSA-2021-5238
Oracle Linux 8 seabios +2 1.13.0-2.module+el8.3.0+7860+a7792d29 ELSA-2022-9172, ELSA-2021-9568, ELSA-2021-5238
Oracle Linux 8 sgabios +1 1:0.20170427git-3.module+el8.3.0+7860+a7792d29 ELSA-2022-9172, ELSA-2021-9568, ELSA-2021-5238
Oracle Linux 8 supermin +1 5.1.19-10.module+el8.3.0+7860+a7792d29 ELSA-2022-9172, ELSA-2021-9568, ELSA-2021-5238
Oracle Linux 8 virt-dib +23 1:1.40.2-25.0.1.module+el8.4.0+20319+6eb4347c ELSA-2022-9172, ELSA-2021-9568, ELSA-2021-5238
Oracle Linux 7 qemu +12 15:4.2.1-10.el7 ELSA-2021-9638, ELSA-2021-9335

Advisories 38

References