CVE-2025-54567

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-54567
hw/pci/pcie_sriov.c in QEMU through 10.0.3 mishandles the VF Enable bit write mask, a related issue to CVE-2024-26327.

4.2 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.6 / Impact : 2.5

Attack Vector ADJACENT_NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact LOW

Scope UNCHANGED

References
Link Resource
https://lore.kernel.org/qemu-devel/20250713-wmask-v1-1-4c744cdb32c0@rsg.ci.i.u-tokyo.ac.jp/ Mailing List Patch
Configurations

Configuration 1 (hide)

cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*
History

16 Dec 2025, 14:40

Type Values Removed Values Added
First Time Qemu
Qemu qemu
CPE cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*
Summary
  • (es) hw/pci/pcie_sriov.c en QEMU hasta 10.0.3 maneja incorrectamente la máscara de escritura del bit de habilitación de VF, un problema relacionado con CVE-2024-26327.
References () https://lore.kernel.org/qemu-devel/20250713-wmask-v1-1-4c744cdb32c0@rsg.ci.i.u-tokyo.ac.jp/ - () https://lore.kernel.org/qemu-devel/20250713-wmask-v1-1-4c744cdb32c0@rsg.ci.i.u-tokyo.ac.jp/ - Mailing List, Patch

25 Jul 2025, 03:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-07-25 03:15

Updated : 2025-12-16 14:40

NVD link : CVE-2025-54567

Mitre link : CVE-2025-54567

CVE.ORG link : CVE-2025-54567

JSON object : View

Products Affected

qemu

  • qemu
CWE
CWE-684

Incorrect Provision of Specified Functionality