A NULL pointer dereference flaw was found in the floppy disk emulator of QEMU. This issue occurs while processing read/write ioport commands if the selected floppy drive is not initialized with a block device. This flaw allows a privileged guest user to crash the QEMU process on the host, resulting in a denial of service. The highest threat from this vulnerability is to system availability.
A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Qemu | Qemu | 5.2.0 (including) | 5.2.0 (including) |
Qemu | Ubuntu | bionic | * |
Qemu | Ubuntu | devel | * |
Qemu | Ubuntu | esm-infra-legacy/trusty | * |
Qemu | Ubuntu | esm-infra/xenial | * |
Qemu | Ubuntu | focal | * |
Qemu | Ubuntu | groovy | * |
Qemu | Ubuntu | hirsute | * |
Qemu | Ubuntu | impish | * |
Qemu | Ubuntu | jammy | * |
Qemu | Ubuntu | kinetic | * |
Qemu | Ubuntu | lunar | * |
Qemu | Ubuntu | mantic | * |
Qemu | Ubuntu | noble | * |
Qemu | Ubuntu | oracular | * |
Qemu | Ubuntu | trusty | * |
Qemu | Ubuntu | trusty/esm | * |
Qemu | Ubuntu | xenial | * |
Qemu-kvm | Ubuntu | precise/esm | * |
Xen | Ubuntu | bionic | * |
Xen | Ubuntu | groovy | * |
Xen | Ubuntu | hirsute | * |
Xen | Ubuntu | impish | * |
Xen | Ubuntu | kinetic | * |
Xen | Ubuntu | lunar | * |
Xen | Ubuntu | mantic | * |
Xen | Ubuntu | trusty | * |
Xen | Ubuntu | xenial | * |
Advanced Virtualization for RHEL 8.4.0.EUS | RedHat | virt:av-8040020220110150817.522a0ee4 | * |
Advanced Virtualization for RHEL 8.4.0.EUS | RedHat | virt-devel:av-8040020220110150817.522a0ee4 | * |
Advanced Virtualization for RHEL 8.5.0.Z | RedHat | virt:av-8050020220115095224.c5368500 | * |
Advanced Virtualization for RHEL 8.5.0.Z | RedHat | virt-devel:av-8050020220115095224.c5368500 | * |
Red Hat Enterprise Linux 8 | RedHat | virt-devel:rhel-8060020220408104655.d63f516d | * |
Red Hat Enterprise Linux 8 | RedHat | virt:rhel-8060020220408104655.d63f516d | * |