Wind River Support Network

HomeDefectsLIN1022-301
Fixed

LIN1022-301 : Security Advisory - qemu - CVE-2021-4158

Created: Apr 29, 2022    Updated: Sep 27, 2022
Resolved Date: Aug 12, 2022
Found In Version: 10.22.33.1
Severity: Standard
Applicable for: Wind River Linux LTS 22
Component/s: Userspace

Description

A NULL pointer dereference issue was found in the ACPI code of QEMU. A malicious, privileged user within the guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service condition.

https://nvd.nist.gov/vuln/detail/CVE-2021-4158

CVEs


Live chat
Online