CVE-2022-1050
published 2022-03-29CVE-2022-1050: A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. This flaw allows a crafted guest driver to execute HW commands when shared…
PriorityP345high8.8CVSS 3.1
AVLACLPRLUINSCCHIHAH
EPSS
0.37%
29.7th percentile
A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. This flaw allows a crafted guest driver to execute HW commands when shared buffers are not yet allocated, potentially leading to a use-after-free condition.
Affected
16 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | qemu | < qemu 1:7.1+dfsg-2 (bookworm) | qemu 1:7.1+dfsg-2 (bookworm) |
| msrc | cbl2_qemu_6.2.0-2_on_cbl_mariner_2.0 | — | — |
| msrc | cbl_mariner_2.0_arm | — | — |
| msrc | cbl_mariner_2.0_x64 | — | — |
| msrc | cm1_qemu-kvm_4.2.0-38_on_cbl_mariner_1.0 | — | — |
| qemu | qemu | < 2.20.1 | 2.20.1 |
| qemu | qemu | — | — |
| qemu | qemu | >= 0 < 1:5.2+dfsg-11+deb11u3 | 1:5.2+dfsg-11+deb11u3 |
| qemu | qemu | >= 0 < 1:7.1+dfsg-2 | 1:7.1+dfsg-2 |
| qemu | qemu | >= 0 < 1:7.1+dfsg-2 | 1:7.1+dfsg-2 |
| qemu | qemu | >= 0 < 1:7.1+dfsg-2 | 1:7.1+dfsg-2 |
| qemu | qemu | >= 0 < 1:4.2-3ubuntu6.27 | 1:4.2-3ubuntu6.27 |
| qemu | qemu | >= 0 < 1:6.2+dfsg-2ubuntu6.11 | 1:6.2+dfsg-2ubuntu6.11 |
| qemu | qemu | >= 0 < 2.0.0+dfsg-2ubuntu1.47+esm3 | 2.0.0+dfsg-2ubuntu1.47+esm3 |
| qemu | qemu | >= 0 < 1:2.5+dfsg-5ubuntu10.51+esm2 | 1:2.5+dfsg-5ubuntu10.51+esm2 |
| qemu | qemu | >= 0 < 1:2.11+dfsg-1ubuntu7.42+esm1 | 1:2.11+dfsg-1ubuntu7.42+esm1 |
CVSS provenance
nvdv3.18.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
nvdv2.04.6MEDIUMAV:L/AC:L/Au:N/C:P/I:P/A:P
osv8.8HIGH
vendor_debian8.8HIGH
vendor_msrc8.8HIGH
vendor_redhat8.8HIGH
vendor_ubuntu8.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
qemu vulnerabilities
osv·2023-06-19·CVSS 8.8
CVE-2022-1050 [HIGH] qemu vulnerabilities
qemu vulnerabilities
It was discovered that QEMU did not properly manage the guest drivers when
shared buffers are not allocated. A malicious guest driver could use this
issue to cause QEMU to crash, resulting in a denial of service, or possibly
execute arbitrary code. This issue only affected Ubuntu 20.04 LTS, Ubuntu
22.04 LTS and Ubuntu 22.10. (CVE-2022-1050)
It was discovered that QEMU did not properly check the size of the
structure pointed to by the guest physical address pqxl. A malicious guest
attacker could use this issue to cause QEMU to crash, resulting in a denial
of service. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS,
Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS and Ubuntu 22.10.
(CVE-2022-4144)
It was discovered that QEMU did not properly manage mem
GHSA
GHSA-hgm4-v6hc-gqq9: Guest driver might execute HW commands when shared buffers are not yet allocated, potentially leading to a use-after-free condition
ghsa_unreviewed·2022-03-30
CVE-2022-1050 [HIGH] CWE-416 GHSA-hgm4-v6hc-gqq9: Guest driver might execute HW commands when shared buffers are not yet allocated, potentially leading to a use-after-free condition
Guest driver might execute HW commands when shared buffers are not yet allocated, potentially leading to a use-after-free condition.
OSV
CVE-2022-1050: A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device
osv·2022-03-29·CVSS 8.8
CVE-2022-1050 [HIGH] CVE-2022-1050: A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device
A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. This flaw allows a crafted guest driver to execute HW commands when shared buffers are not yet allocated, potentially leading to a use-after-free condition.
Red Hat
kernel: loop: Check for overflow while configuring loop
vendor_redhat·2025-06-18·CVSS 5.5
CVE-2022-49993 [MEDIUM] CWE-681 kernel: loop: Check for overflow while configuring loop
kernel: loop: Check for overflow while configuring loop
In the Linux kernel, the following vulnerability has been resolved:
loop: Check for overflow while configuring loop
The userspace can configure a loop using an ioctl call, wherein
a configuration of type loop_config is passed (see lo_ioctl()'s
case on line 1550 of drivers/block/loop.c). This proceeds to call
loop_configure() which in turn calls loop_set_status_from_info()
(see line 1050 of loop.c), passing &config->info which is of type
loop_info64*. This function then sets the appropriate values, like
the offset.
loop_device has lo_offset of type loff_t (see line 52 of loop.c),
which is typdef-chained to long long, whereas loop_info64 has
lo_offset of type __u64 (see line 56 of include/uapi/linux/loop.h).
The function directly copie
Ubuntu
QEMU vulnerabilities
vendor_ubuntu·2023-06-19·CVSS 8.8
CVE-2022-4172 [HIGH] QEMU vulnerabilities
Title: QEMU vulnerabilities
Summary: Several security issues were fixed in QEMU.
It was discovered that QEMU did not properly manage the guest drivers when
shared buffers are not allocated. A malicious guest driver could use this
issue to cause QEMU to crash, resulting in a denial of service, or possibly
execute arbitrary code. This issue only affected Ubuntu 20.04 LTS, Ubuntu
22.04 LTS and Ubuntu 22.10. (CVE-2022-1050)
It was discovered that QEMU did not properly check the size of the
structure pointed to by the guest physical address pqxl. A malicious guest
attacker could use this issue to cause QEMU to crash, resulting in a denial
of service. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS,
Ubuntu 18.04 LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS and Ubuntu 22.10.
(CVE-2022-4
Red Hat
QEMU: pvrdma: use-after-free issue in pvrdma_exec_cmd()
vendor_redhat·2022-03-21·CVSS 8.8
CVE-2022-1050 [HIGH] CWE-416 QEMU: pvrdma: use-after-free issue in pvrdma_exec_cmd()
QEMU: pvrdma: use-after-free issue in pvrdma_exec_cmd()
A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. This flaw allows a crafted guest driver to execute HW commands when shared buffers are not yet allocated, potentially leading to a use-after-free condition.
A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. This flaw allows a crafted guest driver to execute HW commands when shared buffers are not yet allocated, potentially leading to a use-after-free condition.
Statement: The versions of `qemu-kvm` as shipped with Red Hat Enterprise Linux and RHEL Advanced Virtualization are not affected by this flaw, as they are not built with PVRDMA support.
Package: qemu-kvm (Red Hat Enterprise Linux 6) - Not affected
Package: qemu-k
Microsoft
A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. This flaw allows a crafted guest driver to execute HW commands when shared buffers are not yet allocated potentially le
vendor_msrc·2022-03-08·CVSS 8.8
CVE-2022-1050 [HIGH] CWE-416 A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. This flaw allows a crafted guest driver to execute HW commands when shared buffers are not yet allocated potentially le
A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. This flaw allows a crafted guest driver to execute HW commands when shared buffers are not yet allocated potentially leading to a use-after-free condition.
FAQ: Is Azure Linux the only Microsoft product that includes this open-source library and is therefore potentially affected by this vulnerability?
One of the main benefits to our customers who choose to use the Azure Linux distro is the commitment to keep it up to date with the most recent and most secure versions of the open source libraries with which the distro is composed. Microsoft is committed to transparency in this work which is why we began publishing CSAF/VEX in October 2025. See this blog post for more information. If impact to additional produc
Debian
CVE-2022-1050: qemu - A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device....
vendor_debian·2022·CVSS 8.8
CVE-2022-1050 [HIGH] CVE-2022-1050: qemu - A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device....
A flaw was found in the QEMU implementation of VMWare's paravirtual RDMA device. This flaw allows a crafted guest driver to execute HW commands when shared buffers are not yet allocated, potentially leading to a use-after-free condition.
Scope: local
bookworm: resolved (fixed in 1:7.1+dfsg-2)
bullseye: resolved (fixed in 1:5.2+dfsg-11+deb11u3)
forky: resolved (fixed in 1:7.1+dfsg-2)
sid: resolved (fixed in 1:7.1+dfsg-2)
trixie: resolved (fixed in 1:7.1+dfsg-2)
No detection rules found.
No public exploits indexed.
2022-03-29
Published