CVE-2022-4172: Buffer Overflow
An integer overflow and buffer overflow issues were found in the ACPI Error Record Serialization Table (ERST) device of QEMU in the readerstrecord() and writeerstrecord() functions. Both issues may allow the guest to overrun the host buffer allocated for the ERST memory device. A malicious guest could use these flaws to crash the QEMU process on the host.
Other sources
Memory corruption issues (integer overflow and buffer overflow) were found in the ACPI ERST device of QEMU in the readerstrecord() and writeerstrecord() functions. For more information about ACPI ERST, see https://www.qemu.org/docs/master/specs/acpierst.html. Both issues may allow the guest to overrun the host buffer allocated for the ERST memory device. A malicious guest could use these flaws to crash the QEMU process on the host. Arbitrary code execution was deemed unlikely.
Upstream patch: https://lore.kernel.org/qemu-devel/20221019191522.1004804-1-lk@c--e.de/ [v1] https://lore.kernel.org/qemu-devel/20221024154233.1043347-1-lk@c--e.de/ [v2]
Upstream issue & commit: https://gitlab.com/qemu-project/qemu/-/issues/1268 https://gitlab.com/qemu-project/qemu/-/commit/defb7098
— Red Hat
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2022-4172?
CVE-2022-4172 is a vulnerability found in the ACPI Error Record Serialization Table (ERST) device of QEMU that allows a malicious guest to overrun the host buffer allocated for the ERST memory device.
What is the severity of CVE-2022-4172?
The severity of CVE-2022-4172 is medium, with a severity value of 6.5.
How does CVE-2022-4172 affect QEMU?
CVE-2022-4172 affects the ACPI Error Record Serialization Table (ERST) device of QEMU in the read_erst_record() and write_erst_record() functions.
Which versions of QEMU are affected by CVE-2022-4172?
QEMU versions up to but exclusive of 7.2.0 are affected by CVE-2022-4172.
Is there a remedy for CVE-2022-4172?
Yes, upgrading to QEMU 7.2.0 or later will fix the vulnerability.