p PatchFirst

CVE-2025-54567

CVE-2025-54567

This page contains facts from public vulnerability sources. Check the original advisory before updating.

hw/pci/pcie_sriov.c in QEMU through 10.0.3 mishandles the VF Enable bit write mask, a related issue to CVE-2024-26327.

CVSS 4.2 · Medium · EPSS 0.3% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • qemu

    Versions
    • ≥ 10.0.0, ≤ 10.0.3: Affected (custom)

    No fix published

  • qemu Debian:13

    Versions
    • 1:10.0.2+ds-2
    • 1:10.0.2+ds-2+deb13u1~bpo12+1
    Affected ranges
    • ECOSYSTEM: < 1:10.0.2+ds-2+deb13u1

    Update to 1:10.0.2+ds-2+deb13u1

  • qemu Debian:14

    Versions
    • 1:10.0.2+ds-2
    Affected ranges
    • ECOSYSTEM: < 1:10.0.3+ds-1

    Update to 1:10.0.3+ds-1

Original sources

Check your server →