CVE-2023-40360

QEMU through 8.0.4 accesses a NULL pointer in nvme_directive_receive in hw/nvme/ctrl.c because there is no check for whether an endurance group is configured…

published August 14, 2023

CVSS
—
EPSS
0%
Percentile
28.9
In the wild
Unconfirmed
What it is

QEMU through 8.0.4 accesses a NULL pointer in nvme_directive_receive in hw/nvme/ctrl.c because there is no check for whether an endurance group is configured before checking whether Flexible Data Placement is enabled.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00363 · 28.9th percentile
Published
2023-08-14T00:00Z
EPSS history
Timeline
  • 14 AUG 00:00Z
    QEMU through 8.0.4 accesses a NULL pointer in nvme_directive_receive in hw/nvme/ctrl.c because there is no check for whether an endurance group is configured…
    cvelistv5