REDHAT-BUG-2238291: Low severity qemu vulnerability
QEMU through 8.0.0 could trigger a division by zero in scsidiskreset in hw/scsi/scsi-disk.c because scsidiskemulatemodeselect does not prevent s->qdev.blocksize from being 256. This stops QEMU and the guest immediately.
https://gitlab.com/thuth/qemu/-/commit/3f91104484e5bf55b56d7e1b039a4a5a17d0c1a7 https://gitlab.com/qemu-project/qemu/-/issues/1813
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2238291?
The severity of REDHAT-BUG-2238291 is classified as critical due to its potential to cause QEMU to crash.
How do I fix REDHAT-BUG-2238291?
To fix REDHAT-BUG-2238291, you need to update QEMU to version 8.0.0 or later where the vulnerability has been patched.
What versions of QEMU are affected by REDHAT-BUG-2238291?
QEMU versions up to and including 8.0.0 are affected by REDHAT-BUG-2238291.
What specific issue does REDHAT-BUG-2238291 address?
REDHAT-BUG-2238291 addresses a division by zero error in scsi_disk_reset in hw/scsi/scsi-disk.c.
What components of QEMU are impacted by REDHAT-BUG-2238291?
The impacted components in QEMU related to REDHAT-BUG-2238291 are the SCSI disk emulation functionalities.