Lucene search

K
ubuntucveUbuntu.comUB:CVE-2021-3735
HistoryAug 26, 2022 - 12:00 a.m.

CVE-2021-3735

2022-08-2600:00:00
ubuntu.com
ubuntu.com
31
cve-2021-3735
ahci controller
qemu
denial of service
register fis packet

CVSS3

4.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

AI Score

4.9

Confidence

High

EPSS

0

Percentile

12.6%

A deadlock issue was found in the AHCI controller device of QEMU. It occurs
on a software reset (ahci_reset_port) while handling a host-to-device
Register FIS (Frame Information Structure) packet from the guest. A
privileged user inside the guest could use this flaw to hang the QEMU
process on the host, resulting in a denial of service condition. The
highest threat from this vulnerability is to system availability.

Bugs

Notes

Author Note
mdeslaur as of 2024-07-18, no details on the issue

CVSS3

4.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

AI Score

4.9

Confidence

High

EPSS

0

Percentile

12.6%