CVE-2022-0216CWE-416

A use-after-free vulnerability was found in the LSI53C895A SCSI Host Bus Adapter emulation of QEMU

published August 26, 2022

CVSS
—
EPSS
0%
Percentile
36.4
In the wild
Unconfirmed
What it is

A use-after-free vulnerability was found in the LSI53C895A SCSI Host Bus Adapter emulation of QEMU. The flaw occurs while processing repeated messages to cancel the current SCSI request via the lsi_do_msgout function. This flaw allows a malicious privileged user within the guest to crash the QEMU process on the host, resulting in a denial of service.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00432 · 36.4th percentile
Weakness
CWE-416 · Use After Free
Published
2022-08-26T00:00Z
EPSS history
Timeline
  • 26 AUG 00:00Z
    A use-after-free vulnerability was found in the LSI53C895A SCSI Host Bus Adapter emulation of QEMU
    cvelistv5