CVE-2021-3930

Published: Feb 18, 2022Modified: Jun 17, 2026

6.5

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Exploitability: 2.0 / Impact: 4.0

Source: NVD

Description

An off-by-one error was found in the SCSI device emulation in QEMU. It could occur while processing MODE SELECT commands in mode_sense_page() if the 'page' argument was set to MODE_PAGE_ALLS (0x3f). A malicious guest could use this flaw to potentially crash QEMU, resulting in a denial of service condition.

Affected (12)

Products: Qemu: Qemu · Redhat: Codeready Linux Builder, Codeready Linux Builder For Ibm Z Systems, Codeready Linux Builder For Power Little Endian, Enterprise Linux, Enterprise Linux Advanced Virtualization Eus, Enterprise Linux For Ibm Z Systems, Enterprise Linux For Power Little Endian, Openstack · Debian: Debian Linux

Qemu

1 product

Qemu

Redhat

8 products

Codeready Linux Builder

Codeready Linux Builder For Ibm Z Systems

Codeready Linux Builder For Power Little Endian

Enterprise Linux

Enterprise Linux Advanced Virtualization Eus

Enterprise Linux For Ibm Z Systems

Enterprise Linux For Power Little Endian

Openstack

Debian

1 product

Debian Linux

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Qemu Qemu	Before 6.2.0

Configuration B

9 vulnerable

Vulnerable Software	Affected Versions
Redhat Codeready Linux Builder	Version 8.0
Redhat Codeready Linux Builder For Ibm Z Systems	Version 8.0
Redhat Codeready Linux Builder For Power Little Endian	Version 8.0
Redhat Enterprise Linux	Version 8.0
Redhat Enterprise Linux Advanced Virtualization Eus	Version 8.4
Redhat Enterprise Linux For Ibm Z Systems	Version 8.0
Redhat Enterprise Linux For Power Little Endian	Version 8.0
Redhat Openstack	Version 10
Redhat Openstack	Version 13