Wind River Support Network


LIN6-12163 : Security Advisory - qemu - CVE-2016-7421

Created: Dec 15, 2016    Updated: Oct 21, 2020
Resolved Date: Mar 19, 2017
Found In Version:
Fix Version:
Severity: Standard
Applicable for: Wind River Linux 6
Component/s: Userspace


The pvscsi_ring_pop_req_descr function in hw/scsi/vmw_pvscsi.c in QEMU (aka Quick Emulator) allows local guest OS administrators to cause a denial of service (infinite loop and QEMU process crash) by leveraging failure to limit process IO loop to the ring size.

Other Downloads

Live chat