CVE-2016-1568: Use After Free
Last updated 24 July 2024
Other sources
Qemu emulator built with the IDE AHCI Emulation support is vulnerable to a use after free issue. It could occur after processing AHCI Native Command Queuing(NCQ) AIO commands.
A privileged user inside guest could use this flaw to crash the Qemu process instance or potentially execute arbitrary code with privileges of the Qemu process on the host.
Upstream fix: ------------- -> https://lists.gnu.org/archive/html/qemu-devel/2016-01/msg01184.html
Reference: ---------- -> http://www.openwall.com/lists/oss-security/2016/01/09/2
— Red Hat
Use-after-free vulnerability in hw/ide/ahci.c in QEMU, when built with IDE AHCI Emulation support, allows guest OS users to cause a denial of service (instance crash) or possibly execute arbitrary code via an invalid AHCI Native Command Queuing (NCQ) AIO command.
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2016-1568?
CVE-2016-1568 is a use-after-free vulnerability in QEMU's IDE AHCI Emulation support.
How does CVE-2016-1568 affect QEMU?
CVE-2016-1568 allows guest OS users to cause a denial of service (instance crash) or possibly execute arbitrary code via an invalid AHCI Native Command Queuing (NCQ) AIO command.
What is the severity of CVE-2016-1568?
CVE-2016-1568 has a severity rating of high (7).
Which software versions are affected by CVE-2016-1568?
QEMU versions 2.0.0+dfsg-2ubuntu1.22, 1:2.3+dfsg-5ubuntu9.2, 1.0+, and Debian versions 1:3.1+dfsg-8+deb10u8, 1:3.1+dfsg-8+deb10u10, 1:5.2+dfsg-11+deb11u2, 1:7.2+dfsg-7+deb12u1, 1:8.0.4+dfsg-3, 1:8.1.0+ds-6 are affected.
How do I fix CVE-2016-1568?
To fix CVE-2016-1568, update to QEMU version 2.0.0+dfsg-2ubuntu1.22 (for Ubuntu), 1:2.3+dfsg-5ubuntu9.2 (for Ubuntu), 1.0+ (for Ubuntu), 1:3.1+dfsg-8+deb10u8, 1:3.1+dfsg-8+deb10u10, 1:5.2+dfsg-11+deb11u2, 1:7.2+dfsg-7+deb12u1, 1:8.0.4+dfsg-3, or 1:8.1.0+ds-6 (for Debian).