PT-2021-22508 · Qemu+6 · Qemu+6

Qiuhao Li · Published 2021-08-10 · Updated 2025-02-28 · CVE-2021-3929

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions QEMU (affected versions not specified)

Description A DMA reentrancy issue was found in the NVM Express Controller (NVME) emulation. This issue can lead to a use-after-free problem when a malicious guest triggers the reset function nvme ctrl reset(), causing data structs to be freed. As a result, a malicious guest could crash the QEMU process on the host, leading to a denial of service condition, or potentially execute arbitrary code within the context of the QEMU process on the host.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALSA-2021_3061

ALSA-2021_5238

ALSA-2022_0886

ALSA-2022_1759

ALSA-2022_5263

ALSA-2022_5821

ALSA-2022_7967

ALSA-2023_0099

ALSA-2023_2162

ALSA-2023_2757

ALSA-2023_5094

ALSA-2023_5264

ALSA-2023_6980

ALSA-2024_9136

ALT-PU-2022-1369

ALT-PU-2022-1412

ALT-PU-2022-2009

ALT-PU-2022-2062

ALT-PU-2022-3081

ALT-PU-2022-3390

ALT-PU-2023-1830

ALT-PU-2023-1869

AZL-10721

AZL-35152

CVE-2021-3929

OESA-2022-1733

OPENSUSE-SU-2023_3721-1

OPENSUSE-SU-2024:11969-1

SUSE-SU-2023:0761-1

SUSE-SU-2023:0840-1

SUSE-SU-2023:2358-1

SUSE-SU-2023:3721-1

SUSE-SU-2023:3800-1

SUSE-SU-2023_0761-1

SUSE-SU-2023_0840-1

SUSE-SU-2023_2358-1

SUSE-SU-2023_3721-1

SUSE-SU-2023_3800-1

USN-5489-1

Affected Products

Alt Linux

Astra Linux

Debian

Linuxmint

Qemu

Suse

Ubuntu

References · 92

• 🔥 https://github.com/QiuhaoLi/CVE-2021-3929-3947 · Exploit
• 🔥 https://gitlab.com/qemu-project/qemu/-/issues/782 · Exploit
• https://ubuntu.com/security/CVE-2021-3507 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-0358 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-4206 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-3929 · Security Note
• https://osv.dev/vulnerability/SUSE-SU-2023:3800-1 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-3929 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-26354 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-3929 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-3929 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-4207 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2022-1733 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:3721-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:0840-1 · Vendor Advisory