CVEvulnerability
CVE-2022-26354
3.2 LOW
Official page ↗
- Status
- Modified
- Published
- 2022-03-16
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 3.2 LOW — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-772
Description
A flaw was found in the vhost-vsock device of QEMU. In case of error, an invalid element was not detached from the virtqueue before freeing its memory, leading to memory leakage and other unexpected results. Affected QEMU versions <= 6.2.0.
Affected configurations
• qemu qemu (<= 6.2.0)
• debian debian linux 9.0
• debian debian linux 10.0
Related
Weakness · CWE (1)
- CWE-772 Missing Release of Resource after Effective Lifetime weakness
References
- https://gitlab.com/qemu-project/qemu/-/commit/8d1b247f3748ac4078524130c6d7ae42b6140aaf Patch, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2022/04/msg00002.html Mailing List, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html Mailing List, Third Party Advisory
- https://security.gentoo.org/glsa/202208-27 Third Party Advisory
- https://security.netapp.com/advisory/ntap-20220425-0003/ Third Party Advisory
- https://www.debian.org/security/2022/dsa-5133 Third Party Advisory
- https://gitlab.com/qemu-project/qemu/-/commit/8d1b247f3748ac4078524130c6d7ae42b6140aaf Patch, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2022/04/msg00002.html Mailing List, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2022/09/msg00008.html Mailing List, Third Party Advisory
- https://security.gentoo.org/glsa/202208-27 Third Party Advisory
- https://security.netapp.com/advisory/ntap-20220425-0003/ Third Party Advisory
- https://www.debian.org/security/2022/dsa-5133 Third Party Advisory