REDHAT-BUG-1932827: Low severity qemu vulnerability
A potential stack overflow via infinite loop issue was found in various NIC emulators of QEMU. The said issue occurs in loopback mode of a NIC wherein reentrant DMA checks get bypassed. A guest user/process may use this flaw to consume cpu cycles or crash the QEMU process on the host resulting in DoS scenario.
Upstream patch: --------------- -> https://lists.gnu.org/archive/html/qemu-devel/2021-02/msg07431.html
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1932827?
The severity of REDHAT-BUG-1932827 is critical due to its potential to cause CPU exhaustion and crashes.
How do I fix REDHAT-BUG-1932827?
To fix REDHAT-BUG-1932827, you should update to the latest version of QEMU that addresses this vulnerability.
What are the potential impacts of REDHAT-BUG-1932827?
The impacts of REDHAT-BUG-1932827 include excessive CPU consumption and possible crashes of the QEMU process.
Who is affected by REDHAT-BUG-1932827?
Users and systems running the affected versions of QEMU in loopback mode are at risk from REDHAT-BUG-1932827.
When was REDHAT-BUG-1932827 reported?
REDHAT-BUG-1932827 was reported in February 2021.