Loading HuntDB...

GHSA-cp42-9j6q-v649

GitHub Security Advisory

⚠ Unreviewed MODERATE Has CVE

Advisory Details

A flaw was found in QEMU. The async nature of hot-unplug enables a race scenario where the net device backend is cleared before the virtio-net pci frontend has been unplugged. A malicious guest could use this time window to trigger an assertion and cause a denial of service.

Related CVEs

Key Information

GHSA ID
GHSA-cp42-9j6q-v649
Published
September 13, 2023 6:31 PM
Last Modified
November 4, 2023 3:30 AM
CVSS Score
5.0 /10
Primary Ecosystem
Unknown
Primary Package
Unknown
GitHub Reviewed
✗ No

Dataset

Last updated: July 30, 2025 6:36 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.