← Back

Enterprise Linux Advanced Virtualization Eus

enterprise_linux_advanced_virtualization_eus

Vendor: Redhat • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-3748
5Canonical
DebianFedoraproject+2 more
6Debian Linux
Enterprise LinuxEnterprise Linux Advanced Virtualization Eus+3 more
Jun 17, 2026
Mar 23, 2022
N/A· v4
7.5 HIGH· v3
6.9 MEDIUM· v2
A use-after-free vulnerability was found in the virtio-net device of QEMU. It could occur when the descriptor's address belongs to the non direct access region, due to num_buffers being set after the virtqueue elem has b...Show more
A use-after-free vulnerability was found in the virtio-net device of QEMU. It could occur when the descriptor's address belongs to the non direct access region, due to num_buffers being set after the virtqueue elem has been unmapped. A malicious guest could use this flaw to crash QEMU, resulting in a denial of service condition, or potentially execute code on the host with the privileges of the QEMU process.Show less
CVE-2021-3930
3Debian
QemuRedhat
10Codeready Linux Builder
Codeready Linux Builder For Ibm Z SystemsCodeready Linux Builder For Power Little Endian+7 more
Jun 17, 2026
Feb 18, 2022
N/A· v4
6.5 MEDIUM· v3
2.1 LOW· v2
An off-by-one error was found in the SCSI device emulation in QEMU. It could occur while processing MODE SELECT commands in mode_sense_page() if the 'page' argument was set to MODE_PAGE_ALLS (0x3f). A malicious guest cou...Show more
An off-by-one error was found in the SCSI device emulation in QEMU. It could occur while processing MODE SELECT commands in mode_sense_page() if the 'page' argument was set to MODE_PAGE_ALLS (0x3f). A malicious guest could use this flaw to potentially crash QEMU, resulting in a denial of service condition.Show less