CVE-2022-4144: Medium severity qemu vulnerability
An out-of-bounds read flaw was found in the QXL display device emulation in QEMU. The qxlphys2virt() function does not check the size of the structure pointed to by the guest physical address, potentially reading past the end of the bar space into adjacent pages. A malicious guest user could use this flaw to crash the QEMU process on the host causing a denial of service condition.
Other sources
qxlphys2virt() does not check the size of the structure pointed to by the guest physical address pqxl. If pqxl is near the end of the bar1 space, subsequent access to its fields may read past the end into adjacent pages.
Proposed patch by Philippe Mathieu-Daudé: https://lists.nongnu.org/archive/html/qemu-devel/2022-11/msg04143.html
— Red Hat
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2022-4144?
The severity of CVE-2022-4144 is medium with a CVSS score of 6.5.
How does CVE-2022-4144 affect QEMU?
CVE-2022-4144 affects QEMU versions up to and including 7.1.0.
How does CVE-2022-4144 affect Fedora Extra Packages for Enterprise Linux?
CVE-2022-4144 affects Fedora Extra Packages for Enterprise Linux version 8.0.
How does CVE-2022-4144 affect Fedora?
CVE-2022-4144 affects Fedora version 37.
How does CVE-2022-4144 affect Red Hat Enterprise Linux?
CVE-2022-4144 affects Red Hat Enterprise Linux version 8.0.
How can I mitigate the vulnerability CVE-2022-4144?
To mitigate the vulnerability CVE-2022-4144, update QEMU to version 7.2.0 or later.
What is the CWE ID for CVE-2022-4144?
The CWE ID for CVE-2022-4144 is CWE-125.