]> git.ipfire.org Git - thirdparty/openembedded/openembedded-core-contrib.git/commit
qemu: fix CVE-2023-42467
authorYogita Urade <yogita.urade@windriver.com>
Thu, 5 Oct 2023 11:12:52 +0000 (11:12 +0000)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Fri, 6 Oct 2023 10:50:54 +0000 (11:50 +0100)
commit7c42b976d7a72acf917bae9d055768a1350e507d
treeed59099907ff06dd76a872be865826951e87953d
parent53d9d8789efc701609a5a1e985287344c2209d62
qemu: fix CVE-2023-42467

QEMU through 8.0.0 could trigger a division by zero in scsi_disk_reset
in hw/scsi/scsi-disk.c because scsi_disk_emulate_mode_select does not
prevent s->qdev.blocksize from being 256. This stops QEMU and the guest
immediately.

References:
https://nvd.nist.gov/vuln/detail/CVE-2023-42467
https://gitlab.com/qemu-project/qemu/-/issues/1813

Signed-off-by: Yogita Urade <yogita.urade@windriver.com>
Signed-off-by: Alexandre Belloni <alexandre.belloni@bootlin.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
meta/recipes-devtools/qemu/qemu.inc
meta/recipes-devtools/qemu/qemu/CVE-2023-42467.patch [new file with mode: 0644]