Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
4.4
CVE-2022-0216: A use-after-free vulnerability was found in the LSI53C895A SCSI Host Bus Adapter emulation of QEMU. The flaw occurs while processing repeated messages to cancel the current SCSI request via the lsi...
CVE-2022-0216 · published 4 years ago
Summary
A use-after-free vulnerability was found in the LSI53C895A SCSI Host Bus Adapter emulation of QEMU. The flaw occurs while processing repeated messages to cancel the current SCSI request via the lsi_do_msgout function. This flaw allows a malicious privileged user within the guest to crash the QEMU pr...
What to do
- Update debian qemu to version 1:7.1+dfsg-1.
- Update qemu qemu to version 6.0.0 or later.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| – | qemu | qemu |
< 6.0.0 cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:* |
| – | fedoraproject | fedora |
37 cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:* |
| Debian:12 | debian | qemu |
< 1:7.1+dfsg-1 Fix: upgrade to 1:7.1+dfsg-1
|
Original advisory text
A use-after-free vulnerability was found in the LSI53C895A SCSI Host Bus Adapter emulation of QEMU. The flaw occurs while processing repeated messages to cancel the current SCSI request via the lsi...
A use-after-free vulnerability was found in the LSI53C895A SCSI Host Bus Adapter emulation of QEMU. The flaw occurs while processing repeated messages to cancel the current SCSI request via the lsi_do_msgout function. This flaw allows a malicious privileged user within the guest to crash the QEMU process on the host, resulting in a denial of service.
References
- https://access.redhat.com/security/cve/CVE-2022-0216 URL
- https://security-tracker.debian.org/tracker/CVE-2022-0216 Vendor Advisory
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/0xxx/CVE-2022-0216.j... Vendor Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2022-0216 Vendor Advisory
- https://starlabs.sg/advisories/22/22-0216/ Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2036953 Third Party Advisory
- https://gitlab.com/qemu-project/qemu/-/issues/972 Third Party Advisory
- https://gitlab.com/qemu-project/qemu/-/commit/4367a20cc4 Patch
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Type
CWE-416Use After Free
Timeline
Published26 Aug 2022
Updated4 Nov 2026
First seen29 Sep 2026
Track software like this
Free during beta