| Package | Affected versions | Patched versions |
|---|---|---|
| qemu | ≤ 2.8.1.1 | |
| openstack | = 10= 11= 6.0= 7.0= 8= 9 | |
| virtualization | = 4.0 |
The xhci_kick_epctx function in hw/usb/hcd-xhci.c in QEMU (aka Quick Emulator) allows local guest OS privileged users to cause a denial of service (infinite loop and QEMU process crash) via vectors related to control transfer descriptor sequence.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free