CVE-2025-54566

Name
CVE-2025-54566
Description
hw/pci/pcie_sriov.c in QEMU through 10.0.3 has a migration state inconsistency, a related issue to CVE-2024-26327.
NVD Severity
medium
Other trackers
CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia
Mailing lists
oss-security, full-disclosure, bugtraq
Exploits
Exploit DB, Metasploit
Forges
GitHub (code, issues), Aports (code, issues)

References

Type URI
https://lore.kernel.org/qemu-devel/20250713-wmask-v1-1-4c744cdb32c0@rsg.ci.i.u-tokyo.ac.jp/

Match rules

CPE URI Source package Min version Max version
qemu >= 10.0.0 <= 10.0.3

Vulnerable and fixed packages

Source package Branch Version Maintainer Status
qemu edge-community 10.0.2-r3 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
qemu edge-community 10.0.2-r2 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
qemu edge-community 10.0.2-r1 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
qemu edge-community 10.0.2-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
qemu edge-community 10.0.0-r2 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
qemu edge-community 10.0.0-r1 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
qemu edge-community 10.0.0-r0 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable
qemu 3.22-community 10.0.0-r1 Natanael Copa <ncopa@alpinelinux.org> possibly vulnerable