An invalid pointer initialization issue was found in the SLiRP networking implementation of QEMU. The function udp6_input() handles requests for the udp protocol from the guest. While processing a udp packet that is smaller than the size of the udphdr structure it uses memory from outside the working mbuf buffer. This issue may lead to out of bound read access or indirect memory disclosure to the guest.
Created libslirp tracking bugs for this issue:
Affects: epel-all [bug 1972247]
Affects: fedora-all [bug 1972250]
Created qemu tracking bugs for this issue:
Affects: fedora-all [bug 1972245]