A flaw was found in the virtio-net device of QEMU. This flaw was inadvertently introduced with the fix for CVE-2021-3748, which forgot to unmap the cached virtqueue elements on error, leading to memory leakage and other unexpected results. Affected QEMU version: 6.2.0.
The product does not release a resource after its effective lifetime has ended, i.e., after the resource is no longer needed.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Qemu | Qemu | 6.2.0 (including) | 6.2.0 (including) |
Advanced Virtualization for RHEL 8.4.0.EUS | RedHat | virt:av-8040020220517095834.522a0ee4 | * |
Advanced Virtualization for RHEL 8.4.0.EUS | RedHat | virt-devel:av-8040020220517095834.522a0ee4 | * |
Red Hat Enterprise Linux 8 | RedHat | virt-devel:rhel-8060020220616155742.ad008a3a | * |
Red Hat Enterprise Linux 8 | RedHat | virt:rhel-8060020220616155742.ad008a3a | * |
Red Hat Enterprise Linux 9 | RedHat | qemu-kvm-17:6.2.0-11.el9_0.3 | * |
Qemu | Ubuntu | bionic | * |
Qemu | Ubuntu | devel | * |
Qemu | Ubuntu | focal | * |
Qemu | Ubuntu | impish | * |
Qemu | Ubuntu | jammy | * |
Qemu | Ubuntu | kinetic | * |
Qemu | Ubuntu | lunar | * |
Qemu | Ubuntu | mantic | * |
Qemu | Ubuntu | noble | * |
Qemu | Ubuntu | oracular | * |
Qemu | Ubuntu | trusty | * |
Qemu | Ubuntu | trusty/esm | * |
Qemu | Ubuntu | xenial | * |