Debian/qemu: medium 5.5
QEMU through 8.0.4 accesses a NULL pointer in nvme_directive_receive in hw/nvme/ctrl.c because there is no check for whether an endurance group is configured before checking whether Flexible Data Plac
Action: Upgrade qemu to 1:8.0.4+dfsg-2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1:8.0.4+dfsg-2 | - |
Fixed versions
| 1:8.0.4+dfsg-2 |
Sources
- osv: DEBIAN-CVE-2023-40360#Debian:14/qemu
- https://security-tracker.debian.org/tracker/CVE-2023-40360
published · modified · JSON