Nixpkgs security tracker

Login with GitHub
⚠️ You are using a production deployment that is still only suitable for demo purposes. Any work done in this might be wiped later without notice.

Suggestions search

With package: qemu_full

Found 1 matching suggestions

View:
Compact
Detailed
Permalink CVE-2026-3842
7.8 HIGH
  • CVSS version (CVSS): 3.1
  • Attack Vector (AV): Local (L)
  • Attack Complexity (AC): Low (L)
  • Privileges Required (PR): Low (L)
  • User Interaction (UI): None (N)
  • Scope (S): Unchanged (U)
  • Confidentiality (C): High (H)
  • Integrity (I): High (H)
  • Availability (A): High (H)
  • Modified Attack Vector (MAV): Local (L)
  • Modified Attack Complexity (MAC): Low (L)
  • Modified Privileges Required (MPR): Low (L)
  • Modified User Interaction (MUI): None (N)
  • Modified Confidentiality (MC): High (H)
  • Modified Scope (MS): Unchanged (U)
  • Modified Integrity (MI): High (H)
  • Modified Availability (MA): High (H)
created 1 month, 1 week ago Activity log
  • Created suggestion
Qemu-kvm: hyperv/syndbg: missing mapped-length guard after cpu_physical_memory_map causes host oob write

A flaw was found in QEMU. This vulnerability allows a local attacker within a guest virtual machine to write data beyond its allocated memory. This occurs when cpu_physical_memory_map() returns a shorter length than expected, leading to an out-of-bounds write. Successful exploitation could result in unauthorized access to guest memory or corruption of heap-allocated objects, potentially causing information disclosure, data integrity issues, or a denial of service.

Affected products

qemu
  • <11.0.0
rhcos
qemu-kvm
qemu-kvm-ma
virt:rhel/qemu-kvm

Matching in nixpkgs

pkgs.qemu

Generic and open source machine emulator and virtualizer

  • nixos-unstable -
  • nixos-26.05 -

pkgs.qemu_kvm

Generic and open source machine emulator and virtualizer

  • nixos-unstable -
  • nixos-26.05 -

pkgs.qemu_xen

Generic and open source machine emulator and virtualizer

  • nixos-unstable -
  • nixos-26.05 -

pkgs.qemu-user

QEMU User space emulator - launch executables compiled for one CPU on another CPU

  • nixos-unstable -
  • nixos-26.05 -

pkgs.qemu_full

Generic and open source machine emulator and virtualizer

  • nixos-unstable -
  • nixos-26.05 -

pkgs.qemu_test

Generic and open source machine emulator and virtualizer

  • nixos-unstable -
  • nixos-26.05 -

pkgs.qemu-utils

Generic and open source machine emulator and virtualizer

  • nixos-unstable -
  • nixos-26.05 -

pkgs.ubootQemuX86

Boot loader for embedded systems

  • nixos-unstable -
  • nixos-26.05 -

pkgs.armTrustedFirmwareQemu

Reference implementation of secure world software for ARMv8-A

  • nixos-unstable -
  • nixos-26.05 -

pkgs.python313Packages.qemu-qmp

Asyncio library for communicating with QEMU Monitor Protocol (“QMP”) servers

  • nixos-unstable -
    • nixos-unstable-small 0.0.6
  • nixos-26.05 -
    • nixos-26.05-small 0.0.5

pkgs.python314Packages.qemu-qmp

Asyncio library for communicating with QEMU Monitor Protocol (“QMP”) servers

  • nixos-unstable -
    • nixos-unstable-small 0.0.6
  • nixos-26.05 -
    • nixos-26.05-small 0.0.5

Package maintainers