Back to bug 1997184

Who When What Removed Added
Mauro Matteo Cascella 2021-08-24 16:05:37 UTC Depends On 1997215, 1997217, 1997213, 1997214, 1997216, 1997218
Dhananjay Arunesh 2021-08-25 06:17:37 UTC Alias CVE-2021-3735
Summary QEMU: ahci: deadlock issue leads to denial of service CVE-2021-3735 QEMU: ahci: deadlock issue leads to denial of service
Mauro Matteo Cascella 2021-08-25 08:55:08 UTC Doc Text A deadlock issue was found in the AHCI controller device of QEMU. It occurs on a software reset (ahci_reset_port) while handling a host-to-device Register FIS (Frame Information Structure) packet from the guest. A privileged user inside the guest could use this flaw to hang the QEMU process on the host, resulting in a denial of service condition. The highest threat from this vulnerability is to system availability.
Salvatore Bonaccorso 2021-09-03 13:12:36 UTC Flags needinfo?(mcascell)
CC carnil
Mauro Matteo Cascella 2021-09-03 16:38:39 UTC CC jsnow
Flags needinfo?(mcascell) needinfo?(jsnow)
John Snow 2021-09-13 15:37:02 UTC Flags needinfo?(jsnow)
Red Hat Bugzilla 2022-01-19 07:13:24 UTC CC philmd
Red Hat Bugzilla 2022-03-01 08:29:20 UTC CC ribarry
Red Hat Bugzilla 2023-07-07 08:29:50 UTC Assignee security-response-team nobody

Back to bug 1997184