CVE-2022-26354CWE-772

A flaw was found in the vhost-vsock device of QEMU

published March 16, 2022

CVSS
—
EPSS
0%
Percentile
32.1
In the wild
Unconfirmed
What it is

A flaw was found in the vhost-vsock device of QEMU. In case of error, an invalid element was not detached from the virtqueue before freeing its memory, leading to memory leakage and other unexpected results. Affected QEMU versions <= 6.2.0.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00391 · 32.1th percentile
Weakness
CWE-772 · Missing Release of Resource after Effective Lifetime
Published
2022-03-16T14:02Z
EPSS history
Timeline
  • 16 MAR 14:02Z
    A flaw was found in the vhost-vsock device of QEMU
    cvelistv5