CVE-2022-0216

A use-after-free vulnerability was found in the LSI53C895A SCSI Host Bus Adapter emulation of QEMU. The flaw occurs while processing repeated messages to cancel the current SCSI request via the lsi_do_msgout function. This flaw allows a malicious privileged user within the guest to crash the QEMU process on the host, resulting in a denial of service.

CVSS v3.1

4.4 MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

EPSS

0.43% chance of exploitation in the next 30 days, 36th percentile

Published

2022-08-26

Updated

2024-08-02

Proof-of-concept exploits (1)

• https://starlabs.sg/advisories/22/22-0216/

References

• CVE Record
• NVD entry

Related

• CVE-2022-0214
• CVE-2022-0217
• CVE-2022-0213
• CVE-2022-0218
• CVE-2022-0212
• CVE-2022-0219