CVE-2022-26354
A flaw was found in the vhost-vsock device of QEMU. In case of error, an invalid element was not detached from the virtqueue before freeing its memory...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
A flaw was found in the vhost-vsock device of QEMU. In case of error, an invalid element was not detached from the virtqueue before freeing its memory, leading to memory leakage and other unexpected results. Affected QEMU versions <= 6.2.0.
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2022-26354 qemu Corrigé dans: 1:5.2+dfsg-11+deb11u2
- Ubuntu UBUNTU-CVE-2022-26354 qemu Corrigé dans: 1:2.11+dfsg-1ubuntu7.40
Références
- advisory github.com
- advisory nvd.nist.gov
- advisory security.gentoo.org
- advisory security.netapp.com
- advisory debian.org
- patch gitlab.com
- web lists.debian.org
- web lists.debian.org