Unrated

An issue was discovered in QEMU 7.1.0 through 8.2.1. register_vfs in hw/pci/pcie_sriov.c does not set NumVFs to PCI_SRIOV_TOTAL_VF, and thus interacti...

CVE-2024-26328 First seen on SecPulse Feb 19, 2024

Fix status by distribution

Fixed packages published by each distribution for this CVE

Debian DEBIAN-CVE-2024-26328 qemu Fixed in: 1:7.2+dfsg-7+deb12u6

Original description The description as published by the source.

An issue was discovered in QEMU 7.1.0 through 8.2.1. register_vfs in hw/pci/pcie_sriov.c does not set NumVFs to PCI_SRIOV_TOTAL_VF, and thus interaction with hw/nvme/ctrl.c is mishandled.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
advisory nvd.nist.gov
advisory security.netapp.com
web lore.kernel.org

Key facts

Severity: Unrated
Published: Feb 19, 2024
First seen on SecPulse: Feb 19, 2024

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 20:03