CVE-2022-26353CWE-772

A flaw was found in the virtio-net device of QEMU

published March 16, 2022

CVSS
—
EPSS
3%
Percentile
86.1
In the wild
Unconfirmed
What it is

A flaw was found in the virtio-net device of QEMU. This flaw was inadvertently introduced with the fix for CVE-2021-3748, which forgot to unmap the cached virtqueue elements on error, leading to memory leakage and other unexpected results. Affected QEMU version: 6.2.0.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02743 · 86.1th percentile
Weakness
CWE-772 · Missing Release of Resource after Effective Lifetime
Published
2022-03-16T14:02Z
EPSS history
Timeline
  • 16 MAR 14:02Z
    A flaw was found in the virtio-net device of QEMU
    cvelistv5