REDHAT-BUG-1997184: Low severity qemu vulnerability
A deadlock issue was found in the AHCI controller device (ich9-ahci) of QEMU while handling a host-to-device Register FIS (Frame Information Structure) packet from the guest. The bug is triggered on a software reset (ahciresetport) in the handleregh2dfis() function [1]. A privileged user inside the guest could use this flaw to hang the QEMU process on the host, resulting in a denial of service condition.
[1] https://github.com/qemu/qemu/blob/v6.1.0-rc4/hw/ide/ahci.c#L1215
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-1997184?
REDHAT-BUG-1997184 is considered a critical vulnerability as it can lead to system deadlock when handling specific packet types.
How do I fix REDHAT-BUG-1997184?
To fix REDHAT-BUG-1997184, ensure you update QEMU to the latest version where the deadlock issue has been addressed.
What versions of QEMU are affected by REDHAT-BUG-1997184?
REDHAT-BUG-1997184 affects multiple versions of QEMU, specifically those prior to the fix being implemented in recent releases.
Who is at risk from REDHAT-BUG-1997184?
Privileged users running vulnerable versions of QEMU are at risk from REDHAT-BUG-1997184 due to the potential for system deadlocks.
What systems are primarily impacted by REDHAT-BUG-1997184?
The systems primarily impacted by REDHAT-BUG-1997184 are those using QEMU with the AHCI controller device in virtualized environments.