CVE-2022-26354
- State
- Published
- Severity
- Not scored
- Published
- Mar 16, 2022
- Updated
- Aug 3, 2024
- Reserved
- Mar 2, 2022
Description
A flaw was found in the vhost-vsock device of QEMU. In case of error, an invalid element was not detached from the virtqueue before freeing its memory, leading to memory leakage and other unexpected results. Affected QEMU versions <= 6.2.0.
Scores
The record has no CVSS score.
Weaknesses
Affected Products
| Product | Versions |
|---|---|
qemu-kvmn/a |
|
References
- https://gitlab.com/qemu-project/qemu/-/commit/8d1b247f3748ac4078524130c6d7ae42b6140aaf
- [debian-lts-announce] 20220404 [SECURITY] [DLA 2970-1] qemu security updatemailing-list
- https://security.netapp.com/advisory/ntap-20220425-0003/
- DSA-5133vendor-advisory
- GLSA-202208-27vendor-advisory
- [debian-lts-announce] 20220905 [SECURITY] [DLA 3099-1] qemu security updatemailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.