Description
A flaw was found in the vhost-vsock device of QEMU. In case of error, an invalid element was not detached from the virtqueue before freeing its memory, leading to memory leakage and other unexpected results. Affected QEMU versions <= 6.2.0.
Scores
CVSS v3
3.2
EPSS
0.0001
EPSS Percentile
1.5%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:L
Details
CWE
CWE-772
Status
published
Products (3)
debian/debian_linux
9.0
debian/debian_linux
10.0
qemu/qemu
< 6.2.0
Published
Mar 16, 2022
Tracked Since
Feb 18, 2026