Medium severity6.0NVD Advisory· Published Jul 24, 2023· Updated May 12, 2026

CVE-2023-3019

Description

A DMA reentrancy issue leading to a use-after-free error was found in the e1000e NIC emulation code in QEMU. This issue could allow a privileged guest user to crash the QEMU process on the host, resulting in a denial of service.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

QEMU/Qemu
cpe:2.3:a:qemu:qemu:*:*:*:*:*:*:*:*
Range: <8.2.0
Red Hat/Enterprise Linux Server7 versions
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:-:*:*:*+ 6 more
- cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:-:*:*:*
- cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:advanced_virtualization:*:*:*
- cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:*
- cpe:/a:redhat:enterprise_linux:8::crbrange: 8090020231206155326.a75119d5
- cpe:/a:redhat:enterprise_linux:9::appstreamrange: 17:8.2.0-11.el9_4
- cpe:/o:redhat:enterprise_linux:6
- cpe:/o:redhat:enterprise_linux:7
Red Hat/Red Hat Enterprise Linux 8 Advanced Virtualizationv5
cpe:/a:redhat:advanced_virtualization:8::el8
Red Hat/Red Hat Enterprise Linux 8.6 Extended Update Supportv5
cpe:/a:redhat:rhel_eus:8.6::appstream
Range: 8060020231128234847.ad008a3a
Red Hat/Red Hat Enterprise Linux 8.8 Extended Update Supportv5
cpe:/a:redhat:rhel_eus:8.8::appstream
Range: 8080020240116113044.63b34585
Xen/Qemullm-fuzzy
osv-coords35 versions
pkg:rpm/almalinux/qemu-guest-agent pkg:rpm/almalinux/qemu-img pkg:rpm/almalinux/qemu-kvm pkg:rpm/almalinux/qemu-kvm-audio-pa pkg:rpm/almalinux/qemu-kvm-block-blkio pkg:rpm/almalinux/qemu-kvm-block-curl pkg:rpm/almalinux/qemu-kvm-block-rbd pkg:rpm/almalinux/qemu-kvm-common pkg:rpm/almalinux/qemu-kvm-core pkg:rpm/almalinux/qemu-kvm-device-display-virtio-gpu pkg:rpm/almalinux/qemu-kvm-device-display-virtio-gpu-ccw pkg:rpm/almalinux/qemu-kvm-device-display-virtio-gpu-pci pkg:rpm/almalinux/qemu-kvm-device-display-virtio-vga pkg:rpm/almalinux/qemu-kvm-device-usb-host pkg:rpm/almalinux/qemu-kvm-device-usb-redirect pkg:rpm/almalinux/qemu-kvm-docs pkg:rpm/almalinux/qemu-kvm-tools pkg:rpm/almalinux/qemu-kvm-ui-egl-headless pkg:rpm/almalinux/qemu-kvm-ui-opengl pkg:rpm/almalinux/qemu-pr-helper pkg:rpm/opensuse/qemu&distro=openSUSE%20Leap%2015.5 pkg:rpm/opensuse/qemu&distro=openSUSE%20Leap%20Micro%205.3 pkg:rpm/opensuse/qemu&distro=openSUSE%20Leap%20Micro%205.4 pkg:rpm/suse/qemu&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-ESPOS pkg:rpm/suse/qemu&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015%20SP4-LTSS pkg:rpm/suse/qemu&distro=SUSE%20Linux%20Enterprise%20Micro%205.3 pkg:rpm/suse/qemu&distro=SUSE%20Linux%20Enterprise%20Micro%205.4 pkg:rpm/suse/qemu&distro=SUSE%20Linux%20Enterprise%20Micro%205.5 pkg:rpm/suse/qemu&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP5 pkg:rpm/suse/qemu&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP5 pkg:rpm/suse/qemu&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Server%20Applications%2015%20SP5 pkg:rpm/suse/qemu&distro=SUSE%20Linux%20Enterprise%20Server%2015%20SP4-LTSS pkg:rpm/suse/qemu&distro=SUSE%20Linux%20Enterprise%20Server%20for%20SAP%20Applications%2015%20SP4 pkg:rpm/suse/qemu&distro=SUSE%20Manager%20Proxy%204.3 pkg:rpm/suse/qemu&distro=SUSE%20Manager%20Server%204.3
< 17:8.2.0-11.el9_4+ 34 more
- (no CPE)range: < 17:8.2.0-11.el9_4
- (no CPE)range: < 17:8.2.0-11.el9_4
- (no CPE)range: < 17:8.2.0-11.el9_4
- (no CPE)range: < 17:8.2.0-11.el9_4
- (no CPE)range: < 17:8.2.0-11.el9_4
- (no CPE)range: < 17:8.2.0-11.el9_4
- (no CPE)range: < 17:8.2.0-11.el9_4
- (no CPE)range: < 17:8.2.0-11.el9_4
- (no CPE)range: < 17:8.2.0-11.el9_4
- (no CPE)range: < 17:8.2.0-11.el9_4
- (no CPE)range: < 17:8.2.0-11.el9_4
- (no CPE)range: < 17:8.2.0-11.el9_4
- (no CPE)range: < 17:8.2.0-11.el9_4
- (no CPE)range: < 17:8.2.0-11.el9_4
- (no CPE)range: < 17:8.2.0-11.el9_4
- (no CPE)range: < 17:8.2.0-11.el9_4
- (no CPE)range: < 17:8.2.0-11.el9_4
- (no CPE)range: < 17:8.2.0-11.el9_4
- (no CPE)range: < 17:8.2.0-11.el9_4
- (no CPE)range: < 17:8.2.0-11.el9_4
- (no CPE)range: < 7.1.0-150500.49.15.1
- (no CPE)range: < 6.2.0-150400.37.29.1
- (no CPE)range: < 6.2.0-150400.37.29.1
- (no CPE)range: < 6.2.0-150400.37.29.1
- (no CPE)range: < 6.2.0-150400.37.29.1
- (no CPE)range: < 6.2.0-150400.37.29.1
- (no CPE)range: < 6.2.0-150400.37.29.1
- (no CPE)range: < 7.1.0-150500.49.15.1
- (no CPE)range: < 7.1.0-150500.49.15.1
- (no CPE)range: < 7.1.0-150500.49.15.1
- (no CPE)range: < 7.1.0-150500.49.15.1
- (no CPE)range: < 6.2.0-150400.37.29.1
- (no CPE)range: < 6.2.0-150400.37.29.1
- (no CPE)range: < 6.2.0-150400.37.29.1
- (no CPE)range: < 6.2.0-150400.37.29.1

Patches

Vulnerability mechanics

References

bugzilla.redhat.com/show_bug.cginvdIssue TrackingPatchThird Party Advisory
access.redhat.com/errata/RHSA-2024:0135nvdThird Party Advisory
access.redhat.com/errata/RHSA-2024:0404nvdThird Party Advisory
access.redhat.com/errata/RHSA-2024:0569nvdThird Party Advisory
access.redhat.com/security/cve/CVE-2023-3019nvdThird Party Advisory
access.redhat.com/errata/RHSA-2024:2135nvd
cert-portal.siemens.com/productcert/html/ssa-577017.htmlnvd
lists.debian.org/debian-lts-announce/2025/04/msg00042.htmlnvd
security.netapp.com/advisory/ntap-20230831-0005/nvd

News mentions

Siemens Ruggedcom Rox
CISA ICS Advisories

cvss	0.390
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000