Unrated severityNVD Advisory· Published Jun 2, 2021· Updated Aug 3, 2024

CVE-2021-3544

Description

Several memory leaks were found in the virtio vhost-user GPU device (vhost-user-gpu) of QEMU in versions up to and including 6.0. They exist in contrib/vhost-user-gpu/vhost-user-gpu.c and contrib/vhost-user-gpu/virgl.c due to improper release of memory (i.e., free) after effective lifetime.

Affected products

N/A/Qemuv5
Range: All QEMU versions up to and including 6.0

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

security.gentoo.org/glsa/202208-27mitrevendor-advisoryx_refsource_GENTOO
www.debian.org/security/2021/dsa-4980mitrevendor-advisoryx_refsource_DEBIAN
www.openwall.com/lists/oss-security/2021/05/31/1mitremailing-listx_refsource_MLIST
bugzilla.redhat.com/show_bug.cgimitrex_refsource_MISC
security.netapp.com/advisory/ntap-20210720-0008/mitrex_refsource_CONFIRM

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000