CVE-2025-54567: Medium severity Qemu Qemu vulnerability
Published Jul 25, 2025
·Updated
hw/pci/pciesriov.c in QEMU through 10.0.3 mishandles the VF Enable bit write mask, a related issue to CVE-2024-26327.
Affected Software
2 affected components
Qemu Qemu<=10.0.3
Qemu Qemu<=10.0.3
Remediation
Event History
Jul 25, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·03:15 AM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-54567?
CVE-2025-54567 has a moderate severity rating due to the risk of improper handling of the VF Enable bit write mask.
2
How do I fix CVE-2025-54567?
To mitigate CVE-2025-54567, update QEMU to version 10.0.4 or later.
3
Which versions of QEMU are affected by CVE-2025-54567?
CVE-2025-54567 affects QEMU versions up to and including 10.0.3.
4
What is the impact of CVE-2025-54567 on virtualization?
CVE-2025-54567 may allow unauthorized access to virtual function resources, impacting the security of virtualized environments.
5
Is CVE-2025-54567 related to any other vulnerabilities?
Yes, CVE-2025-54567 is related to CVE-2024-26327, indicating shared issues in handling VF Enable bit write masks.