| Package | Affected versions | Patched versions |
|---|---|---|
| qemu | ≤ 2.7.1 | |
| openstack | = 10= 11= 6.0= 7.0= 8= 9 | |
| virtualization | = 4.0 |
The xhci_ring_fetch function in hw/usb/hcd-xhci.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) by leveraging failure to limit the number of link Transfer Request Blocks (TRB) to process.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free