Launchpad.net

Launchpad Home
Code
Bugs
Blueprints
Translations
Answers

CVE 2021-3544

Several memory leaks were found in the virtio vhost-user GPU device (vhost-user-gpu) of QEMU in versions up to and including 6.0. They exist in contrib/vhost-user-gpu/vhost-user-gpu.c and contrib/vhost-user-gpu/virgl.c due to improper release of memory (i.e., free) after effective lifetime.

Related bugs and status

CVE-2021-3544 (Candidate) is related to these bugs:

Bug #1959984: [22.04 FEAT] KVM: Allow long kernel command lines for QEMU

Summary				In	Importance	Status
	1959984	[22.04 FEAT] KVM: Allow long kernel command lines for QEMU		qemu (Ubuntu)	High	Fix Released
	1959984	[22.04 FEAT] KVM: Allow long kernel command lines for QEMU		Ubuntu on IBM z Systems	High	Fix Released

See the

CVE page on Mitre.org for more details.

References

MISC: https://bugzilla.redha...
MISC: https://www.debian.org...
MISC: https://security.gento...
MISC: http://www.openwall.co...
MISC: https://security.netap...