REDHAT-BUG-1930087: Low severity qemu vulnerability
An infinite loop issue was found in the e1000 NIC emulator of the QEMU. It occurs while processing transmit (tx) descriptors in processtxdesc, if various descriptor fields are initialised with invalid values. A guest may use this flaw to consume cpu cycles on the host resulting in DoS scenario.
Upstream patch: --------------- -> https://lists.gnu.org/archive/html/qemu-devel/2021-02/msg03595.html
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1930087?
The severity of REDHAT-BUG-1930087 is classified as a DoS vulnerability due to potential CPU cycle consumption.
How do I fix REDHAT-BUG-1930087?
To fix REDHAT-BUG-1930087, you should apply the latest patches and updates provided by the QEMU project.
What systems are affected by REDHAT-BUG-1930087?
REDHAT-BUG-1930087 affects QEMU versions where the e1000 NIC emulator is used.
What are the potential impacts of REDHAT-BUG-1930087?
The potential impact of REDHAT-BUG-1930087 includes a denial of service (DoS) condition from excessive CPU usage by affected guest systems.
Is there a workaround for REDHAT-BUG-1930087?
Currently, disabling the use of the e1000 NIC emulator can serve as a temporary workaround for REDHAT-BUG-1930087.